ci: used latest lts for the non-matrix verification job and audited s…

…ignatures of installed deps
semantic-release · Apr 28, 2023 · 7eeaa21 · 7eeaa21
1 parent 55c092a
commit 7eeaa21
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 6 deletions.
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -23,7 +23,8 @@ jobs:
         with:
           cache: npm
           node-version: lts/*
-      - run: npm ci
+      - run: npm clean-install
+      - run: npm audit signatures
       - run: npx semantic-release
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -25,7 +25,9 @@ jobs:
         with:
           node-version: "${{ matrix.node-version }}"
           cache: npm
-      - run: npm ci
+      - run: npm clean-install
+      - name: Ensure dependencies are compatible with the engines range
+        run: npx ls-engines
       - run: "npm run test:ci"
   test:
     runs-on: ubuntu-latest
@@ -34,9 +36,8 @@ jobs:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3
         with:
-          node-version: 16
+          node-version: lts/*
           cache: npm
-      - run: npm ci
-      - name: Ensure dependencies are compatible with the engines range
-        run: npx ls-engines
+      - run: npm clean-install
+      - run: npm audit signatures
       - run: npm run lint