Merge pull request #568 from docker/sec-cli/npm-ci-20260612-184913

fix: replace npm install with npm ci (20260612-184913)
fix: use lockfile-aware install commands
2026-06-14 23:48:00 +00:00 · 2026-06-12 14:10:56 -05:00 · 2026-06-12 18:49:15 +00:00
2 changed files with 2 additions and 2 deletions
@@ -488,7 +488,7 @@ jobs:
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Install k3s
-        uses: crazy-max/.github/.github/actions/install-k3s@716fd1c51a46c5d93a41d44a94b439c9ee802536 # v1.10.0
+        uses: crazy-max/.github/.github/actions/install-k3s@9ba6e6f9450baf3b1237f8035c1fdc45932510bd # v1.8.0
      -
        name: Set up Docker Buildx
        id: buildx
@@ -17,7 +17,7 @@ FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn install && mkdir /vendor && cp yarn.lock /vendor
+  yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor

 FROM scratch AS vendor-update
 COPY --from=deps /vendor /
Author	SHA1	Message	Date
temenuzhka-thede	c887d9748d	Merge pull request #568 from docker/sec-cli/npm-ci-20260612-184913 fix: replace npm install with npm ci (20260612-184913)	2026-06-12 14:10:56 -05:00
securityeng-bot[bot]	cfdae34ead	fix: use lockfile-aware install commands	2026-06-12 18:49:15 +00:00