Document the risks of allowedCommands, npm install etc, and supply chain risks #39292
Description
Describe the proposed change(s).
Based on:
- CLI (where?)
- Community Server (same container)
Also, ./gradlew ..., go:generate #39163 , etc