From e27b5b8eed9fe74bc0df06d03fd9879b27448652 Mon Sep 17 00:00:00 2001
From: "securityeng-bot[bot]"
 <219863240+securityeng-bot[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 14:22:35 +0000
Subject: [PATCH 1/2] fix: use lockfile-aware install commands

---
 .github/workflows/build.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index dc9f1cd..35b3fd7 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -41,7 +41,7 @@ jobs:
         with:
           go-version: '1.23.8'
 
-      - run: npm install
+      - run: npm ci
         working-directory: vscode-extension
 
       - run: rm -rf vscode-extension/bin
@@ -74,7 +74,7 @@ jobs:
         with:
           node-version: '22.x'
 
-      - run: npm install
+      - run: npm ci
 
       - run: sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
 
@@ -119,7 +119,7 @@ jobs:
           node-version: '22.x'
 
       - run: |
-          NODE_OS=${{ matrix.nodeos }} NODE_ARCH=${{ matrix.nodearch }} npm install
+          NODE_OS=${{ matrix.nodeos }} NODE_ARCH=${{ matrix.nodearch }} npm ci
 
       - name: Set variables
         id: set-variables
@@ -216,7 +216,7 @@ jobs:
           node-version: '22.x'
 
       - run: |
-          NODE_OS=${{ matrix.nodeos }} NODE_ARCH=${{ matrix.nodearch }} npm install
+          NODE_OS=${{ matrix.nodeos }} NODE_ARCH=${{ matrix.nodearch }} npm ci
 
       - name: Set variables
         id: set-variables

From c27031149bf0a326353d18eb0cfbbb9ce16c0b63 Mon Sep 17 00:00:00 2001
From: "securityeng-bot[bot]"
 <219863240+securityeng-bot[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 14:22:36 +0000
Subject: [PATCH 2/2] fix: use lockfile-aware install commands

---
 .github/workflows/lint.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 179fd9b..84fd51f 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -19,7 +19,7 @@ jobs:
           node-version: '22.x'
 
       - name: Install dependencies
-        run: npm install
+        run: npm ci
 
       - name: Run ESLint
         run: npm run lint