SCANNPM-122 Avoid usage of "npm install" and use fix versions

.github/workflows/build.yml

@@ -40,7 +40,9 @@ jobs:
         run: npm ci
 
       - name: Build
-        run: npm run build
+        run: |
+          npm run build
+          npx knip
         env:
           VERSION: SNAPSHOT
 
@@ -78,13 +80,19 @@ jobs:
         with:
           secrets: |
             development/artifactory/token/${{ github.repository_owner }}-${{ github.event.repository.name }}-qa-deployer access_token | ARTIFACTORY_DEPLOY_ACCESS_TOKEN;
+            development/artifactory/token/${{ github.repository_owner }}-${{ github.event.repository.name }}-private-reader access_token | ARTIFACTORY_ACCESS_TOKEN;
+
+      - name: Configure npm registry
+        run: |
+          npm config set //repox.jfrog.io/artifactory/api/npm/:_authToken=${{ fromJSON(steps.secrets.outputs.vault).ARTIFACTORY_ACCESS_TOKEN }}
+          npm config set registry https://repox.jfrog.io/artifactory/api/npm/npm/
 
       - name: Setup integration test
         run: |
           (cd build && npm pack)
           cp build/sonar-scan-SNAPSHOT.tgz test/integration
           (cd test/integration && npm install --no-save sonar-scan-SNAPSHOT.tgz)
-          (cd tools/orchestrator && npm install && npm run build)
+          (cd tools/orchestrator && npm run build)
         shell: bash
 
       - name: Run integration tests
@@ -100,23 +108,6 @@ jobs:
     if: (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository)
     steps: *qa-steps
 
-  knip:
-    name: Knip
-    needs: build
-    runs-on: github-ubuntu-latest-s
-    steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-
-      - uses: jdx/mise-action@146a28175021df8ca24f8ee1828cc2a60f980bd5 # v3.5.1
-        with:
-          version: 2025.7.12
-
-      - name: Install dependencies and run knip
-        run: |
-          npm install --no-package-lock
-          npm run build
-          npx knip
-
   analyze:
     name: Analyze in SonarCloud
     needs: build

test/integration/package.json

@@ -10,6 +10,6 @@
     "test": "jest scanner.test.js --coverage"
   },
   "devDependencies": {
-    "jest": "^30.0.5"
+    "jest": "30.0.5"
   }
 }