|
16 | 16 | strategy: |
17 | 17 | matrix: |
18 | 18 | node-version: |
19 | | - -14.17 |
20 | | - -16 |
| 19 | + -18.0.0 |
| 20 | + -19 |
| 21 | + -20 |
21 | 22 |
|
22 | 23 | runs-on:ubuntu-latest |
23 | 24 |
|
|
28 | 29 | with: |
29 | 30 | node-version:${{ matrix.node-version }} |
30 | 31 | cache:npm |
31 | | - -run:npm ci |
| 32 | + -run:npm clean-install |
| 33 | + -run:npm audit signatures |
32 | 34 | -run:npm run test:ci |
33 | 35 |
|
34 | 36 | # separate job to set as required in branch protection, |
|
40 | 42 | -uses:actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab# v3 |
41 | 43 | -uses:actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c# v3 |
42 | 44 | with: |
43 | | -node-version:16 |
| 45 | +node-version:lts/* |
44 | 46 | cache:npm |
45 | | - -run:npmci |
| 47 | + -run:npmclean-install |
46 | 48 | -name:Ensure dependencies are compatible with the version of node |
47 | 49 | run:npx ls-engines |
48 | 50 | -run:npm run lint |
| 51 | +# https://github.com/lirantal/lockfile-lint#readme |
| 52 | + -name:Scan lockfile for security issues |
| 53 | +run:npx lockfile-lint --path package-lock.json |