From fa37353a406290ada9df0fafd800b13cf6a3d1d8 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 14:33:58 -0500 Subject: [PATCH 1/7] Added check to fail if NPM commands are used --- .github/workflows/pull-request-no-npm.yml | 24 +++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 .github/workflows/pull-request-no-npm.yml diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml new file mode 100644 index 0000000..bb88752 --- /dev/null +++ b/.github/workflows/pull-request-no-npm.yml @@ -0,0 +1,24 @@ +name: Do not use the npm command + +on: + workflow_call: + +jobs: + Detect-NPM: + runs-on: ubuntu-latest + steps: + - name: Checkout repository + uses: actions/checkout@v4 + + - name: Scan workflow file for forbidden npm commands + run: | + FORBIDDEN_COMMAND="npm " + WORKFLOW_DIRECTORY=".github/workflows" + + if grep -rq "$FORBIDDEN_COMMAND" "$WORKFLOW_DIRECTORY"; then + echo "::error::Forbidden 'npm' command found in one or more workflow files!" + echo "Please use 'pnpm' instead." + exit 1 + else + echo "No forbidden 'npm' commands found. The job can proceed." + fi From 095876293d7e6cd0514ea5eb50a9b40ef09abb19 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 14:51:49 -0500 Subject: [PATCH 2/7] Added check to fail if NPM commands are used 1771789909 --- .github/workflows/pull-request-no-npm.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index bb88752..3ef1fc6 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -12,10 +12,9 @@ jobs: - name: Scan workflow file for forbidden npm commands run: | - FORBIDDEN_COMMAND="npm " WORKFLOW_DIRECTORY=".github/workflows" - if grep -rq "$FORBIDDEN_COMMAND" "$WORKFLOW_DIRECTORY"; then + if grep -rE '\bnpm\b' "$WORKFLOW_DIRECTORY"; then echo "::error::Forbidden 'npm' command found in one or more workflow files!" echo "Please use 'pnpm' instead." exit 1 From 2c8996f1c21d445c50a28b30ada6c0d3a13a24e4 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 14:57:17 -0500 Subject: [PATCH 3/7] Added check to fail if NPM commands are used 1771790237 --- .github/workflows/pull-request-no-npm.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index 3ef1fc6..344f257 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -12,9 +12,9 @@ jobs: - name: Scan workflow file for forbidden npm commands run: | - WORKFLOW_DIRECTORY=".github/workflows" + LOCATIONS=".github/workflows docs/docs package.json" - if grep -rE '\bnpm\b' "$WORKFLOW_DIRECTORY"; then + if grep -rE '\bnpm\b' "$LOCATIONS"; then echo "::error::Forbidden 'npm' command found in one or more workflow files!" echo "Please use 'pnpm' instead." exit 1 From f571ae6b4f86e825c07a54822248de58d29d4710 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 15:00:41 -0500 Subject: [PATCH 4/7] Added check to fail if NPM commands are used 1771790441 --- .github/workflows/pull-request-no-npm.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index 344f257..db890bc 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -14,7 +14,7 @@ jobs: run: | LOCATIONS=".github/workflows docs/docs package.json" - if grep -rE '\bnpm\b' "$LOCATIONS"; then + if grep -rE '^[^#]*\bnpm\b' "$LOCATIONS"; then echo "::error::Forbidden 'npm' command found in one or more workflow files!" echo "Please use 'pnpm' instead." exit 1 From 2b6221fcad3b517f035be78ea46d1df39024b0af Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 15:05:51 -0500 Subject: [PATCH 5/7] Added check to fail if NPM commands are used 1771790751 --- .github/workflows/pull-request-no-npm.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index db890bc..f35667b 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -2,6 +2,7 @@ name: Do not use the npm command on: workflow_call: + pull_request: jobs: Detect-NPM: From 9aa5b3e93ddfc9d4c29509959757a5cfa2548747 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 15:09:03 -0500 Subject: [PATCH 6/7] Added check to fail if NPM commands are used 1771790943 --- .github/workflows/pull-request-no-npm.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index f35667b..436b689 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -2,7 +2,7 @@ name: Do not use the npm command on: workflow_call: - pull_request: + pull_request: jobs: Detect-NPM: From b573a4b2b90798d2ca98d3850cbcf6cd449d60e8 Mon Sep 17 00:00:00 2001 From: Peter Harrison <16875803+palisadoes@users.noreply.github.com> Date: Sun, 22 Feb 2026 15:11:43 -0500 Subject: [PATCH 7/7] Added check to fail if NPM commands are used 1771791103 --- .github/workflows/pull-request-no-npm.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/.github/workflows/pull-request-no-npm.yml b/.github/workflows/pull-request-no-npm.yml index 436b689..db890bc 100644 --- a/.github/workflows/pull-request-no-npm.yml +++ b/.github/workflows/pull-request-no-npm.yml @@ -2,7 +2,6 @@ name: Do not use the npm command on: workflow_call: - pull_request: jobs: Detect-NPM: