From 30f4b7f6a6c3b0c0ecf4d4efb0de203c48d11562 Mon Sep 17 00:00:00 2001
From: "securityeng-bot[bot]"
 <219863240+securityeng-bot[bot]@users.noreply.github.com>
Date: Mon, 15 Jun 2026 11:55:18 -0400
Subject: [PATCH] fix: replace npm install with npm ci (20260615-141322) (#762)

fix: use lockfile-aware install commands

Co-authored-by: securityeng-bot[bot] <219863240+securityeng-bot[bot]@users.noreply.github.com>
---
 vuejs/vuejs/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/vuejs/vuejs/Dockerfile b/vuejs/vuejs/Dockerfile
index 45e15251..8e374072 100755
--- a/vuejs/vuejs/Dockerfile
+++ b/vuejs/vuejs/Dockerfile
@@ -9,7 +9,7 @@ COPY . .
 RUN yarn global add @vue/cli
 COPY .npmrc .
 COPY .yarnrc.yml .
-RUN yarn install
+RUN yarn install --immutable
 ENV HOST=0.0.0.0
 CMD ["yarn", "run", "serve"]