SDA-4611 Disable EnableNodeCliInspectArguments electron fuse (#2196)

* SDA-4611 Disable EnableNodeCliInspectArguments electron fuse

* Semgrep update

.semgrepignore

@@ -1,2 +1,3 @@
 spec/
-Dockerfile
+Dockerfile
+scripts/afterPackHoock.js

package.json

@@ -41,6 +41,7 @@
     "artifactName": "${productName}-${version}-${os}.${ext}",
     "asar": true,
     "asarUnpack": "**/*.node",
+    "afterPack": "scripts/afterPackHoock.js",
     "nsis": {
       "perMachine": false,
       "oneClick": true,
@@ -167,6 +168,7 @@
     "url": "https://support.symphony.com"
   },
   "devDependencies": {
+    "@electron/fuses": "^1.8.0",
     "@types/cheerio": "^0.22.22",
     "@types/enzyme": "^3.10.7",
     "@types/fs-extra": "^9.0.0",

scripts/afterPackHoock.js

@@ -0,0 +1,21 @@
+const path = require('path');
+const { flipFuses, FuseVersion, FuseV1Options } = require('@electron/fuses');
+
+module.exports = async function afterPack(context) {
+  const {
+    appOutDir,
+    packager: { appInfo, platform },
+  } = context;
+  const ext = {
+    darwin: '.app',
+    win32: '.exe',
+  }[context.electronPlatformName];
+  const electronBinaryPath = path.join(
+    appOutDir,
+    `${appInfo.productFilename}${ext}`,
+  );
+  await flipFuses(electronBinaryPath, {
+    version: FuseVersion.V1,
+    [FuseV1Options.EnableNodeCliInspectArguments]: false,
+  });
+};