From 7654842a67641c93b3a67d1c5fcb4ecf37e94dbe Mon Sep 17 00:00:00 2001
From: dev-hari-prasad <webdev.byhari@gmail.com>
Date: Mon, 7 Sep 2026 15:13:35 +0530
Subject: [PATCH] ci: add --check-cache to yarn install in CI workflows

Pass --check-cache to yarn install in GitHub Actions workflows to verify that cached package archives match the remote registry checksums, protecting against cache poisoning or corrupted cached packages.
---
 .github/workflows/check-javascript-style.yml | 2 +-
 .github/workflows/run-feature-tests-epas.yml | 2 +-
 .github/workflows/run-feature-tests-pg.yml   | 2 +-
 .github/workflows/run-javascript-tests.yml   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/check-javascript-style.yml b/.github/workflows/check-javascript-style.yml
index 974501a1114..bf85c782f48 100644
--- a/.github/workflows/check-javascript-style.yml
+++ b/.github/workflows/check-javascript-style.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Install Node modules
         run: |
           cd web
-          yarn install
+          yarn install --check-cache
 
       - name: Run the linter
         run: |
diff --git a/.github/workflows/run-feature-tests-epas.yml b/.github/workflows/run-feature-tests-epas.yml
index 3d0442aa8d7..9e8ba57be35 100644
--- a/.github/workflows/run-feature-tests-epas.yml
+++ b/.github/workflows/run-feature-tests-epas.yml
@@ -150,7 +150,7 @@ jobs:
       - name: Build the JS bundle
         run: |
           cd web
-          yarn install
+          yarn install --check-cache
           yarn run bundle
 
       - name: Run the tests
diff --git a/.github/workflows/run-feature-tests-pg.yml b/.github/workflows/run-feature-tests-pg.yml
index 90900ced5d0..647bfa12a39 100644
--- a/.github/workflows/run-feature-tests-pg.yml
+++ b/.github/workflows/run-feature-tests-pg.yml
@@ -160,7 +160,7 @@ jobs:
       - name: Build the JS bundle
         run: |
           cd web
-          yarn install
+          yarn install --check-cache
           yarn run bundle
 
       - name: Run the tests
diff --git a/.github/workflows/run-javascript-tests.yml b/.github/workflows/run-javascript-tests.yml
index 6648aafc42e..a44159b7c55 100644
--- a/.github/workflows/run-javascript-tests.yml
+++ b/.github/workflows/run-javascript-tests.yml
@@ -37,7 +37,7 @@ jobs:
       - name: Install Node modules
         run: |
           cd web
-          yarn install
+          yarn install --check-cache
 
       - name: Run the tests
         run: |