Merge pull request #692 from GSA-TTS/require_hashes

Require package hashes for pip and npm
GSA-TTS · Dec 13, 2024 · 856ee0b · 856ee0b
2 parents c8a90e8 + 22f7e36
commit 856ee0b
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/pa11y.yml b/.github/workflows/pa11y.yml
@@ -38,7 +38,7 @@ jobs:
           node-version: "18"
 
       - name: Install dependencies
-        run: npm install --production=false && pip install -r requirements.txt
+        run: npm ci --production=false && pip install --require-hashes -r requirements.txt
 
       - name: Setup custom variables
         id: customvars

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -30,7 +30,7 @@ jobs:
           node-version: "${{ steps.nvm.outputs.NVMRC }}"
 
       - name: Install NPM dependencies
-        run: npm install
+        run: npm ci
 
       - name: Build site
         run: npm run build