Azure / Azure/azure-sdk-tools

[TypeSpec Authoring][Security] Remove all npm install -g usage in pipelines

Open Beginner friendly
#15,732 0 comments 0 reactions 0 assignees View on GitHub
needs-triage
Dominant language
C#
Stars
135
Forks
260
Avg merge
3d 1h
Merged PRs (30d)
143

Description

Parent epic: #15730

Remove all `npm install -g` usage from pipelines. Pending on engsys best practice.

Why:
- Global installs cannot lock package.

Scope:
- azure-typespec-author benchmark pipeline

Contributor guide

Open the contributing guide

Research direction

Start by locating the azure-typespec-author benchmark pipeline and review the pending engsys best practice. Remove its npm install -g usage so the pipeline installs lockable dependencies, then verify that no global npm install remains in the scoped pipeline.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
ci-cd
Issue type
Refactor
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
62/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.