feat: validate role records #1453

	name: Check Lockfile
	on:
	pull_request:

	jobs:
	lockfile_version:
	name: Lockfile version check
	runs-on: ubuntu-latest
	steps:
	- name: Check out a copy of the repo
	uses: actions/checkout@v4
	- name: Check package-lock.json version has not been changed
	uses: mansona/npm-lockfile-version@v1
	with:
	version: 3
	lockfile_changes:
	name: Lockfile changes check
	runs-on: ubuntu-latest
	steps:
	- name: Check out a copy of the repo
	uses: actions/checkout@v4
	- name: Create GitHub App Token
	uses: actions/create-github-app-token@v1
	id: app-token
	with:
	app-id: ${{ vars.LOCKFILE_BOT_APP_ID }}
	private-key: ${{ secrets.LOCKFILE_BOT_PRIVATE_KEY }}
	- name: NPM Lockfile Changes
	# The original doesn't support v3 lockfiles so we use a fork that adds support for them
	# The fork doesn't update comments by an app token, so we use our own fork
	uses: digidem/npm-lockfile-changes@614dfc33742374cb40bec2878e5b690580d11ede
	with:
	token: ${{ steps.app-token.outputs.token }}
	updateComment: true

Provide feedback