diff --git a/package.json b/package.json
index 1012ecbb40b..2784e6fad9c 100644
--- a/package.json
+++ b/package.json
@@ -291,5 +291,11 @@
     "@google-cloud/cloud-sql-connector": {
       "uuid": "^11.1.1"
     }
+  },
+  "allowScripts": {
+    "esbuild": true,
+    "protobufjs": false,
+    "puppeteer": false,
+    "re2": true
   }
 }
diff --git a/scripts/storage-emulator-integration/run.sh b/scripts/storage-emulator-integration/run.sh
index 7bac37c6be2..526e9d4e9df 100755
--- a/scripts/storage-emulator-integration/run.sh
+++ b/scripts/storage-emulator-integration/run.sh
@@ -10,6 +10,11 @@ source scripts/set-default-credentials.sh
 # Prepare the storage emulator rules runtime
 firebase setup:emulators:storage
 
+# Ensure Puppeteer browser is installed for conformance tests
+if [ -z "$PUPPETEER_EXECUTABLE_PATH" ]; then
+  node node_modules/puppeteer/install.js
+fi
+
 # Determine port check method once globally.
 if command -v nc >/dev/null 2>&1; then
   is_port_in_use() {