.github: tests need nodejs

Signed-off-by: Christian Stewart <christian@aperture.us>

Author: paralin

.github/workflows/codeql-analysis.yml

@@ -26,13 +26,9 @@ jobs:
       matrix:
         language: [ 'go' ]
         go: ['1.24']
+        node: [22.x]
 
     steps:
-    - name: Harden Runner
-      uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
-      with:
-        egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
-
     - name: Checkout repository
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
@@ -41,6 +37,12 @@ jobs:
       with:
         go-version: ${{ matrix.go }}
 
+    - name: Setup Node.JS ${{ matrix.node }}
+      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
+      with:
+        node-version: ${{ matrix.node }}
+        cache: 'yarn'
+
     - name: Initialize CodeQL
       uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
       with:

.github/workflows/tests.yml

@@ -17,17 +17,21 @@ jobs:
     strategy:
       matrix:
         go: ['1.24']
+        node: [22.x]
     timeout-minutes: 10
     steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
-        with:
-          egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
-
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
       - name: Setup Go ${{ matrix.go }}
         uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: ${{ matrix.go }}
+
+      - name: Setup Node.JS ${{ matrix.node }}
+        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v4.0.1
+        with:
+          node-version: ${{ matrix.node }}
+          cache: 'yarn'
+
       - name: Test Go
         run: go test -v ./...