only remove cross-spawn

googleapis · Nov 21, 2024 · d318edf · d318edf
1 parent 593dbea
commit d318edf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.cloudbuild/library_generation/library_generation.Dockerfile b/.cloudbuild/library_generation/library_generation.Dockerfile
@@ -62,8 +62,8 @@ ENV OS_ARCHITECTURE="linux-x86_64"
 # install OS tools
 RUN apk update && apk add unzip curl rsync openjdk11 jq bash nodejs npm git
 
-# Remove unnecessary npm modules
-RUN rm -rf /usr/lib/node_modules/npm/node_modules
+# Remove unnecessary cross-spawn from npm to resolve CVE-2024-21538
+RUN rm -rf /usr/lib/node_modules/npm/node_modules/cross-spawn/
 
 SHELL [ "/bin/bash", "-c" ]