Merge pull request #1018 from docker/sec-cli/npm-ci-20260612-182458

fix: replace npm install with npm ci (20260612-182458)
fix: use lockfile-aware install commands
2026-06-14 16:42:47 +00:00 · 2026-06-12 14:10:03 -05:00 · 2026-06-12 18:24:59 +00:00
1 changed files with 1 additions and 1 deletions
@@ -17,7 +17,7 @@ FROM base AS deps
 RUN --mount=type=bind,target=.,rw \
  --mount=type=cache,target=/src/.yarn/cache \
  --mount=type=cache,target=/src/node_modules \
-  yarn install && mkdir /vendor && cp yarn.lock /vendor
+  yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
 FROM scratch AS vendor-update
 COPY --from=deps /vendor /
Author	SHA1	Message	Date
temenuzhka-thede	3864d6aed8	Merge pull request #1018 from docker/sec-cli/npm-ci-20260612-182458 zizmor / zizmor (push) Failing after 0s Details validate / prepare (push) Successful in 32s Details validate / validate (push) Failing after 51s Details codeql / analyze (push) Failing after 1m49s Details test / test (push) Successful in 1m58s Details fix: replace npm install with npm ci (20260612-182458)	2026-06-12 14:10:03 -05:00
securityeng-bot[bot]	64b25388de	fix: use lockfile-aware install commands	2026-06-12 18:24:59 +00:00