diff --git a/.github/workflows/malware-safe-chain.yml b/.github/workflows/malware-safe-chain.yml index c2af9487..1057c6e6 100644 --- a/.github/workflows/malware-safe-chain.yml +++ b/.github/workflows/malware-safe-chain.yml @@ -1,30 +1,28 @@ name: Malware Safe Chain + on: + pull_request: ~ push: branches: - main - pull_request: - branches: - - main + jobs: - safe-chain: + malware-safe-chain: runs-on: ubuntu-latest permissions: contents: read steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Install pnpm uses: pnpm/action-setup@v4 - with: - version: 10 - name: Use Node.js uses: actions/setup-node@v4 with: node-version: '22' cache: 'pnpm' - - name: Install Aikido Safe Chain - run: npm install -g @aikidosec/safe-chain - - name: Setup Safe Chain for CI - run: safe-chain setup-ci + + - name: Install safe-chain + run: curl -fsSL https://raw.githubusercontent.com/AikidoSec/safe-chain/main/install-scripts/install-safe-chain.sh | sh -s -- --ci + - name: Install dependencies with Safe Chain protection - run: pnpm install + run: pnpm install --frozen-lockfile diff --git a/package.json b/package.json index fed1fd7d..62384995 100644 --- a/package.json +++ b/package.json @@ -3,6 +3,7 @@ "version": "0.0.1", "license": "MIT", "type": "module", + "packageManager": "pnpm@10.25.0", "volta": { "node": "22.21.1" },