use npm ci instead of npm install

Author: havardthom

.github/workflows/cicd.yml

@@ -34,7 +34,7 @@ jobs:
         run: npm list
 
       - name: Install dependencies
-        run: npm install --prefer-offline
+        run: npm ci --ignore-scripts --prefer-offline
 
       # - name: Typecheck
       #   run: npm run typecheck

Dockerfile

@@ -13,7 +13,7 @@ FROM base as deps
 WORKDIR /myapp
 
 ADD package.json package-lock.json .npmrc ./
-RUN npm install --include=dev
+RUN npm ci --ignore-scripts --include=dev
 
 # Setup production node_modules
 FROM base as production-deps

README.md

@@ -22,9 +22,9 @@ COOKIE_SECRET="s3cr3ts3cr3t"
 ### Start app in development mode
 
 ```sh
-npm install             # Install dependencies
-npm run setup:db        # Setup Prisma and migrate database
-npm run dev             # Start app in dev mode with hot reload
+npm ci --ignore-scripts     # Install dependencies
+npm run setup:db            # Setup Prisma and migrate database
+npm run dev                 # Start app in dev mode with hot reload
 ```
 
 ### (Optional) Use prod data in local dev