validate-npm-package-lock-json.yml

name: Validate package-lock.json against source feeds

on:
  # Manual run
  workflow_dispatch:
  pull_request:

jobs:
  validate-package-lock-json:
    name: 'Validate package-lock.json against source feeds'
    runs-on: ubuntu-latest

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
        with:
        fetch-depth: 0
        submodules: false

      - name: Set up Node.js
        uses: actions/setup-node@v4
        with:
          node-version: 20.x

      - name: Run npm ci to validate package-lock.json against the feed
        shell: pwsh
        id: npm-install-script
        run: npm ci --prefer-online --fetch-retries 5