Merge pull request #1 from HakordiaNetwork/alert-autofix-31

Potential fix for code scanning alert no. 31: Unsafe shell command constructed from library input

Author: cur1y-dev

packages/amplify-e2e-core/src/utils/index.ts

@@ -78,7 +78,7 @@ export const loadFunctionTestFile = (fileName: string): string => {
  */
 export const addNodeDependencies = (root: string, functionName: string, dependencies: string[]): void => {
   const indexPath = path.join(getPathToFunction(root, functionName), 'src');
-  execa.commandSync(`yarn add ${dependencies.join(' ')}`, { cwd: indexPath });
+  execa.sync('yarn', ['add', ...dependencies], { cwd: indexPath });
 };
 
 /**