ci: lint yarn lockfiles to analyze and detect security issues (#6424)

.github/workflows/test.yml

@@ -97,6 +97,8 @@ jobs:
           fail-on-cache-miss: true
       - name: Assert yarn prints no warnings
         run: scripts/assert_no_yarn_warnings.sh
+      - name: Lint yarn lockfile
+        run: npx lockfile-lint --path yarn.lock --allowed-hosts npm yarn --validate-https
       - name: Lint Code
         run: yarn lint
       - name: Lint Grafana dashboards
@@ -149,12 +151,12 @@ jobs:
       matrix:
         node: [20]
     steps:
-      - uses: actions/checkout@v4      
+      - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: ${{ matrix.node }}
           check-latest: true
-          cache: yarn 
+          cache: yarn
 
       # # Remove when finished debugging core dumps
       # - uses: './.github/actions/setup-debug-node'
@@ -184,7 +186,7 @@ jobs:
         # Rever to "yarn test:unit" when finished debugging core dumps
         # run: sudo sh -c "ulimit -c unlimited && /usr/bin/node-with-debug $(which yarn) test:unit"
         run: yarn test:unit
-      
+
       # # Remove when finished debugging core dumps
       # - uses: './.github/actions/core-dump'
       #   if: ${{ failure() && steps.unit_tests.conclusion == 'failure' }}
@@ -276,7 +278,7 @@ jobs:
           key: ${{ runner.os }}-node-${{ matrix.node }}-${{ github.sha }}
           fail-on-cache-miss: true
       - name: Install Chrome browser
-        run: npx @puppeteer/browsers install chromedriver@latest --path /tmp          
+        run: npx @puppeteer/browsers install chromedriver@latest --path /tmp
       - name: Install Firefox browser
         run: npx @puppeteer/browsers install firefox@latest --path /tmp
       - name: Browser tests
@@ -330,7 +332,7 @@ jobs:
         working-directory: packages/beacon-node
       - name: Spec tests bls
         run: yarn test:spec:bls
-        working-directory: packages/beacon-node        
+        working-directory: packages/beacon-node
       - name: Spec tests minimal
         run: yarn test:spec:minimal
         working-directory: packages/beacon-node