Add .yarnrc to disable scripts (#10354)

* add yarn rc file to disable scripts

* remove ignore scripts in CI

* re-add entry

* add lavamoat preinstall always fail

* allow-scripts - add missing package to denylist

Co-authored-by: kumavis <kumavis@users.noreply.github.com>

.circleci/scripts/deps-install.sh

@@ -5,7 +5,7 @@ set -x
 # Exit immediately if a command exits with a non-zero status.
 set -e
 
-yarn --frozen-lockfile --ignore-scripts --har
+yarn --frozen-lockfile --har
 
 # Move HAR file into directory with consistent name so that we can cache it
 mkdir -p build-artifacts/yarn-install-har

.yarnrc

@@ -0,0 +1 @@
+ignore-scripts true

package.json

@@ -75,6 +75,7 @@
     "@download/blockies": "^1.0.3",
     "@formatjs/intl-relativetimeformat": "^5.2.6",
     "@fortawesome/fontawesome-free": "^5.13.0",
+    "@lavamoat/preinstall-always-fail": "^1.0.0",
     "@material-ui/core": "^4.11.0",
     "@metamask/contract-metadata": "^1.22.0",
     "@metamask/controllers": "^5.1.0",
@@ -322,7 +323,8 @@
       "ursa-optional": false,
       "gc-stats": false,
       "github:assemblyscript/assemblyscript": false,
-      "tiny-secp256k1": false
+      "tiny-secp256k1": false,
+      "@lavamoat/preinstall-always-fail": false
     }
   }
 }

yarn.lock

@@ -1962,6 +1962,11 @@
     yargs "^16.2.0"
     yarn-logical-tree "^1.0.2"
 
+"@lavamoat/preinstall-always-fail@^1.0.0":
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/@lavamoat/preinstall-always-fail/-/preinstall-always-fail-1.0.0.tgz#e78a6e3d9e212a4fef869ec37d4f5fb498dea373"
+  integrity sha512-vD2DcC0ffJj1w2y1Lu0OU39wHmlPEd2tCDW04Bm6Kf4LyRnCHCezTsS8yzeSJ+4so7XP+TITuR5FGJRWxPb+GA==
+
 "@material-ui/core@^4.11.0":
   version "4.11.0"
   resolved "https://registry.yarnpkg.com/@material-ui/core/-/core-4.11.0.tgz#b69b26e4553c9e53f2bfaf1053e216a0af9be15a"