SIGSEC-785: Ensure only pinned dependencies are used in CircleCI conf…

…ig (#228)
signavio · Sep 3, 2024 · a597bbc · a597bbc
1 parent 9d3c56b
commit a597bbc
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/.circleci/config.yml b/.circleci/config.yml
@@ -46,7 +46,7 @@ jobs:
 
       - *restore_deps
 
-      - run: yarn install
+      - run: yarn install --frozen-lockfile
 
       - save_cache:
           key: *dep_cache_key
@@ -65,7 +65,7 @@ jobs:
 
       - run: echo "//registry.npmjs.org/:_authToken=$NPM_TOKEN" >> ~/.npmrc
 
-      - run: yarn install && yarn build
+      - run: yarn install --frozen-lockfile && yarn build
       - run: npm prune --production
 
       - blackduck/blackduck-detect: