ci: add back npx lockfile-lint --path package-lock.json

semantic-release · May 29, 2023 · f4f1340 · f4f1340
1 parent 24dec8f
commit f4f1340
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -42,3 +42,6 @@ jobs:
       - name: Ensure dependencies are compatible with the version of node
         run: npx ls-engines
       - run: npm run lint
+      # https://github.com/lirantal/lockfile-lint#readme
+      - name: Scan lockfile for security issues
+        run: npx lockfile-lint --path package-lock.json