Add `lockfile-lint` to `npm/yarn` projects to validate the package-lock files

openrewrite / rewrite-github-actions

OpenRewrite recipes for performing GitHub action hygiene and migration tasks.

Apache License 2.0

9 stars 10 forks source link

Add `lockfile-lint` to `npm/yarn` projects to validate the package-lock files #48

Open yeikel opened 1 year ago

yeikel commented 1 year ago

Example


jobs:
  check-dist:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3

      - name: Set Node.js 16.x
        uses: actions/setup-node@v2.4.1
        with:
          node-version: 16.x
      - name: Validate package-lock
        run: npx lockfile-lint --path package-lock.json --allowed-hosts npm yarn --validate-https