Sep 15, 2025 · Sep 15, 2025 · Sep 15, 2025
diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml
        registry-url: 'https://registry.npmjs.org'
    - run: npm install -g npm@latest
      shell: bash
    - run: npm clean-install
    # TODO(NODE-7058): use npm CI here once we have a package-lock.json again
    - run: npm install --ignore-scripts
      shell: bash
Original file line number	Diff line number	Diff line change
Expand Up		@@ -10,5 +10,6 @@
		registry-url: 'https://registry.npmjs.org'
		- run: npm install -g npm@latest
		shell: bash
		- run: npm clean-install
		# TODO(NODE-7058): use npm CI here once we have a package-lock.json again
		- run: npm install --ignore-scripts
		shell: bash
Check failure Code scanning / CodeQL Checkout of untrusted code in a privileged context Critical Potential execution of untrusted code on a privileged workflow ( issue_comment Loading )