From 044b33a04f8149d687e1c07e752a09145c2b317a Mon Sep 17 00:00:00 2001
From: Steve Larson <9larsons@gmail.com>
Date: Thu, 6 Aug 2026 10:49:42 -0500
Subject: [PATCH] Harden reusable Yarn installs

---
 .github/workflows/lint-only.yml | 2 +-
 .github/workflows/test.yml      | 7 +------
 2 files changed, 2 insertions(+), 7 deletions(-)

diff --git a/.github/workflows/lint-only.yml b/.github/workflows/lint-only.yml
index 48fb853f..7c0278bb 100644
--- a/.github/workflows/lint-only.yml
+++ b/.github/workflows/lint-only.yml
@@ -31,5 +31,5 @@ jobs:
           node-version: ${{ matrix.node }}
           cache: yarn
 
-      - run: yarn --prefer-offline --frozen-lockfile
+      - run: yarn --prefer-offline --frozen-lockfile --ignore-scripts
       - run: yarn lint
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index ebac1b0c..cfb1074d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -36,12 +36,7 @@ jobs:
           node-version: ${{ matrix.node }}
           cache: yarn
 
-      - run: |
-          if [ -f lerna.json ]; then
-            yarn global add lerna@^4
-          fi
-
-      - run: yarn --prefer-offline --frozen-lockfile
+      - run: yarn --prefer-offline --frozen-lockfile --ignore-scripts
       - run: yarn test
 
       - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7