GE/Zscaler proxy inspection breaks npm ci silently, leaving node_modules incomplete and vite missing at build time. Detect the root CA from the host's chain to the npm registry and stage it as corp-root-ca.pem so the Dockerfile trusts it; harmless on clean networks.
11 KiB
11 KiB