js: use "npm ci" instead of install for increased security

ElementsProject · Jan 29, 2024 · 8327cf5 · 8327cf5
1 parent 3c4f0ac
commit 8327cf5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/wasm-package.yml b/.github/workflows/wasm-package.yml
@@ -27,7 +27,7 @@ jobs:
       - run: sudo contrib/bullseye_deps.sh -j -n -w
 
       # Build NPM package into a tgz file (pack internally triggers the build/prepare script)
-      - run: cd src/wasm_package && npm install && npm pack --foreground-scripts
+      - run: cd src/wasm_package && npm ci && npm pack --foreground-scripts
         name: Build & Pack
 
       # Report the SHA256 digest of the final package. This should be deterministic (including generated WASM),