diff --git a/.github/workflows/verify-yarn-lock.yml b/.github/workflows/verify-yarn-lock.yml index bcb535657c..7cbb6b5416 100644 --- a/.github/workflows/verify-yarn-lock.yml +++ b/.github/workflows/verify-yarn-lock.yml @@ -39,7 +39,7 @@ jobs: with: # Fine to skip scripts since we don't run any code # Hardened mode validates lockfile security (no mismatched metadata, valid resolutions) - command: YARN_ENABLE_HARDENED_MODE=1 yarn install --skip-builds + command: YARN_ENABLE_HARDENED_MODE=1 yarn install --mode skip-build attempt_limit: 3 attempt_delay: 2000 diff --git a/package.json b/package.json index 746166ccea..37e491ebdf 100644 --- a/package.json +++ b/package.json @@ -355,12 +355,18 @@ }, "lockfile-lint": { "path": "yarn.lock", + "type": "yarn", "allowedHosts": [ "npm", - "yarn" + "yarn", + "github.com" ], "allowedSchemes": [ - "https:" + "https:", + "npm:", + "workspace:", + "link:", + "patch:" ], "allowedPackageNameAliases": [ "@babel/traverse--for-generate-function-map:@babel/traverse", @@ -373,8 +379,8 @@ "https://codeload.github.com/bluesky-social/react-native-progress/tar.gz/5a372f4f2ce5feb26f4f47b6a4d187ab9b923ab4", "https://codeload.github.com/mattermost/react-native-paste-input/tar.gz/f260447edc645a817ab1ba7b46d8341d84dba8e9" ], - "emptyHostname": false, + "emptyHostname": true, "validatePackageNames": true, - "validateIntegrity": true + "validateIntegrity": false } }