From 78f2c60efcc21a705ce71a382274eb2c8994652c Mon Sep 17 00:00:00 2001
From: archnode <markus.aichinger@gmail.com>
Date: Tue, 24 Sep 2019 14:37:45 +0200
Subject: [PATCH] feat(composer): No no-scripts and no-autoloader on trust
level high. (#4531) (#4535)
---
lib/manager/composer/artifacts.ts | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/lib/manager/composer/artifacts.ts b/lib/manager/composer/artifacts.ts
index 8a2ed9f823..14c79ae42a 100644
--- a/lib/manager/composer/artifacts.ts
+++ b/lib/manager/composer/artifacts.ts
@@ -118,8 +118,10 @@ export async function updateArtifacts(
args =
('update ' + updatedDeps.join(' ')).trim() + ' --with-dependencies';
}
- args +=
- ' --ignore-platform-reqs --no-ansi --no-interaction --no-scripts --no-autoloader';
+ args += ' --ignore-platform-reqs --no-ansi --no-interaction';
+ if (global.trustLevel !== 'high') {
+ args += ' --no-scripts --no-autoloader';
+ }
logger.debug({ cmd, args }, 'composer command');
({ stdout, stderr } = await exec(`${cmd} ${args}`, {
cwd,
--
GitLab