Repository navigation
Yarn.lock should not be present in the prod image #9810
Description
Apache Airflow version:
1.10.11, 2.0.0
What happened:
Yarn.lock and package.json file are present in Production image. This make for example security scanners to find vulnerabilities even if they are not really "present".
What you expected to happen:
Yarn.lock and package.json should not be present in the image.
How to reproduce it:
Run docker run -it <AIRFLOW_IMAGE> bash
ls /home/airflow/.local/lib/python*/site-packages/airflow/www_/package.json /home/airflow/.local/lib/python/site-packages/airflow/www_*/yarn.lock
Both files are present.
They should not be.
Activity
Remove package.json and yarn.lock from the prod image (#9814)
sync fork from main (#1)
Remove package.json and yarn.lock from the prod image (#9814)
Remove package.json and yarn.lock from the prod image (#9814)
Remove package.json and yarn.lock from the prod image (apache#9814)