ci: run npm ci --ignore-scripts for workflows

Author: ahnpnl

.github/actions/setup-docspace/action.yml

@@ -15,7 +15,9 @@ runs:
         cache-dependency-path: 'website/package-lock.json'
 
     - name: Install 🔧
-      run: npm ci
+      run: |
+        npm ci --ignore-scripts
+        npm rebuild sharp
       shell: bash
       working-directory: website
 

.github/actions/setup-workspace/action.yml

@@ -29,5 +29,5 @@ runs:
 
     - name: Install and build 🔧
       if: ${{ steps.cache-npm.outputs.cache-hit != 'true' }}
-      run: npm ci --prefer-offline
+      run: npm ci --ignore-scripts --prefer-offline
       shell: bash

.github/workflows/release-and-publish.yml

@@ -80,7 +80,7 @@ jobs:
       - name: Check lock file
         # runs npm install using package-lock.json and verifies
         # if dependencies are matching with package.json or not
-        run: npm ci
+        run: npm ci --ignore-scripts
         # This will tell npm to publish your scoped package with public access
       - name: Publish with latest tag
         if: ${{ needs.setup_variables.outputs.isLatest == 'true' }}

scripts/test-examples.js

@@ -14,7 +14,7 @@ const executeTest = () => {
   logger.log('ensuring all dependencies of target project are installed')
   logger.log()
 
-  execa.sync('npm', ['ci'], { cwd: projectPath })
+  execa.sync('npm', ['ci', '--ignore-scripts'], { cwd: projectPath })
   logger.log()
 
   logger.log('installing bundled version of ts-jest')