fix: use lockfile-aware install commands

This commit is contained in:
securityeng-bot[bot]
2026-06-12 14:59:33 +00:00
committed by GitHub
co-authored by GitHub
parent b522ed9b9b
commit b4a0d4268e
+1 -1
View File
@@ -17,7 +17,7 @@ FROM base AS deps
RUN --mount=type=bind,target=.,rw \
--mount=type=cache,target=/src/.yarn/cache \
--mount=type=cache,target=/src/node_modules \
yarn install && mkdir /vendor && cp yarn.lock /vendor
yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
FROM scratch AS vendor-update
COPY --from=deps /vendor /