Reference

glab-dependency-firewall-yarn(1)

Run Yarn through the GitLab Dependency Firewall. (BETA)

NAME

glab-dependency-firewall-yarn - Run Yarn through the GitLab Dependency Firewall. (BETA)

SYNOPSIS

glab dependency-firewall yarn [flags]

DESCRIPTION

Run the yarn binary through the GitLab Dependency Firewall. The command checks each package download and upload against the policy for the current project, refuses blocked packages, and summarizes the results after the run.

The command uses your package manager's registry or index configuration, and does not modify it.

This command requires Yarn 3.2 or later, or Yarn Classic (1.x). It refuses Yarn 2.x through 3.1, because those versions cannot stop a .yarnrc.yml file from routing registry traffic around the firewall. During the run, Yarn ignores per-host networkSettings from every .yarnrc.yml file, so every request goes through the firewall.

All arguments are forwarded to yarn verbatim.

This feature is in beta and might not be ready for production use. It might be unstable and breaking changes can occur outside of major releases. For more information, see https://docs.gitlab.com/policy/development_stages_support/.

OPTIONS INHERITED FROM PARENT COMMANDS

-h, --help[=false]
Show help for this command.

EXAMPLE

# Install dependencies through the Dependency Firewall
glab dependency-firewall yarn install
# Add a package through the Dependency Firewall
glab dependency-firewall yarn add left-pad

SEE ALSO

glab-dependency-firewall(1)