Merge branch 'npm-custom-registry' into 'master'v3.7.6

Exclude `devDependencies` from NodeJS based scan reports

See merge request gitlab-org/security-products/license-management!141

5 files changed, 27 insertions, 6 deletions

diff --git a/config/.bashrc b/config/.bashrc
index 9c463dd..9c4dd9a 100644
--- a/config/.bashrc
+++ b/config/.bashrc
@@ -40,6 +40,7 @@ function enable_dev_mode() {
   unset HISTFILESIZE
   unset HISTSIZE
   export EDITOR=vim
+  export LOG_LEVEL=debug
   set -o vi
   apt-get update -y
   apt-get install -y --no-install-recommends vim less shellcheck
diff --git a/config/.curlrc b/config/.curlrc
new file mode 100644
index 0000000..df02a54
--- /dev/null
+++ b/config/.curlrc
@@ -0,0 +1,2 @@
+# Don't show progress meter
+--silent
diff --git a/config/.npmrc b/config/.npmrc
new file mode 100644
index 0000000..426026b
--- /dev/null
+++ b/config/.npmrc
@@ -0,0 +1,13 @@
+audit=false
+dev=false
+fetch-retries=2
+fetch-retry-max-timeout=10000
+fetch-retry-min-timeout=5000
+ignore-scripts=true
+log-level=silly
+only=production
+optional=true
+package-lock=true
+prefer-offline=true
+progress=false
+send-metrics=false
diff --git a/config/.tool-versions b/config/.tool-versions
index 9803064..adfbc82 100644
--- a/config/.tool-versions
+++ b/config/.tool-versions
@@ -3,9 +3,9 @@ golang system
 gradle 6.3
 java adopt-openjdk-8u242-b08 adopt-openjdk-11.0.7+10
 maven 3.6.3
-nodejs 10.19.0
-php 7.4.4
-python 3.8.2 2.7.17
-ruby 2.6.5
+nodejs 12.16.3 10.20.1
+php 7.4.5
+python 3.8.2 2.7.18
+ruby 2.6.6
 rust system
 sbt 1.3.8
diff --git a/config/install.sh b/config/install.sh
index 2fa313c..13167e0 100644
--- a/config/install.sh
+++ b/config/install.sh
@@ -1,5 +1,5 @@
 #!/bin/bash
-set -euxo pipefail
+set -euo pipefail
 
 export DEBIAN_FRONTEND=noninteractive
 
@@ -109,14 +109,19 @@ chmod 777 /tmp
 chmod +t /tmp
 
 rm -fr "$ASDF_DATA_DIR/docs" \
-  "$ASDF_DATA_DIR"/installs/**/**/share \
   "$ASDF_DATA_DIR"/installs/golang/**/go/test \
   "$ASDF_DATA_DIR"/installs/java/**/demo \
   "$ASDF_DATA_DIR"/installs/java/**/man \
   "$ASDF_DATA_DIR"/installs/java/**/sample \
   "$ASDF_DATA_DIR"/installs/python/**/lib/**/test \
   "$ASDF_DATA_DIR"/installs/ruby/**/lib/ruby/gems/**/cache \
+  "$ASDF_DATA_DIR"/installs/**/**/share \
   "$ASDF_DATA_DIR"/test \
+  "$HOME"/.config/configstore/update-notifier-npm.json \
+  "$HOME"/.config/pip/selfcheck.json \
+  "$HOME"/.gem \
+  "$HOME"/.npm \
+  "$HOME"/.wget-hsts \
   /etc/apache2/* \
   /etc/bash_completion.d/* \
   /etc/calendar/* \