--ignore-scripts vs --filter for credential isolation in CI
When setting up integration tests in a CI environment that lacks production-level credentials, there are two primary strategies to prevent accidental execution of sensitive lifecycle scripts. One approach involves using pnpm install --ignore-scripts to globally suppress lifecycle hooks. This prevents postinstall scripts that might load environment variables