12
0
Fork 0
mirror of https://github.com/docker/setup-qemu-action.git synced 2026-06-28 12:40:45 +00:00

fix: use lockfile-aware install commands

This commit is contained in:
securityeng-bot[bot] 2026-06-12 18:49:25 +00:00 committed by GitHub
parent 259a565a6f
commit d1e45353ee
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -17,7 +17,7 @@ FROM base AS deps
RUN --mount=type=bind,target=.,rw \
--mount=type=cache,target=/src/.yarn/cache \
--mount=type=cache,target=/src/node_modules \
yarn install && mkdir /vendor && cp yarn.lock /vendor
yarn install --immutable && mkdir /vendor && cp yarn.lock /vendor
FROM scratch AS vendor-update
COPY --from=deps /vendor /