forenkle yarn auth for @navikt repository

.github/actions/setup-yarnrc/action.yml

@@ -0,0 +1,16 @@
+name: Setup yarn config
+description: Run yarn config commands so that @navikt/ packages are resolved from github package registry, with neccessary auth.
+inputs:
+  npmAuthToken:
+    description: Token that has packages:read permission for the navikt organization.
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Setup yarn config
+      shell: bash
+      run: |
+        yarn config set npmScopes.navikt.npmRegistryServer "https://npm.pkg.github.com"
+        yarn config set npmScopes.navikt.npmAlwaysAuth true
+        yarn config set npmScopes.navikt.npmAuthToken ${{ inputs.npmAuthToken }}

.github/workflows/codeql-analysis.yml

@@ -10,12 +10,13 @@ on:
 
 jobs:
   codeql:
-   name: CodeQl
-   permissions:
-     actions: read
-     contents: read
-     security-events: write
-   uses: navikt/fp-gha-workflows/.github/workflows/codeql.yml@main
-   with:
-    language: javascript
-   secrets: inherit
+    name: CodeQl
+    permissions:
+      actions: read
+      contents: read
+      security-events: write
+    uses: navikt/fp-gha-workflows/.github/workflows/codeql.yml@main
+    with:
+      language: javascript
+    secrets:
+      READER_TOKEN: ${{ secrets.READER_TOKEN }}

.github/workflows/deploy-storybook.yml

@@ -10,4 +10,5 @@ jobs:
       contents: write
       pages: write
     uses: navikt/fp-gha-workflows/.github/workflows/deploy-storybook.yml@main
-    secrets: inherit
+    secrets:
+      READER_TOKEN: ${{ secrets.READER_TOKEN }}

.github/workflows/valider-pull-request.yml

@@ -7,23 +7,19 @@ jobs:
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v5
+
+      - uses: ./.github/actions/setup-yarnrc
         with:
-          fetch-depth: 0
+          npmAuthToken: ${{ inputs.npmAuthToken }}
 
-      - name: Sette yarn-config
-        run: |
-          yarn config set npmScopes.navikt.npmRegistryServer "https://npm.pkg.github.com"
-          yarn config set npmScopes.navikt.npmAlwaysAuth true
-          yarn config set npmScopes.navikt.npmAuthToken $NPM_AUTH_TOKEN
-        env:
-          NPM_AUTH_TOKEN: ${{ secrets.READER_TOKEN }}
-
-      - uses: actions/setup-node@v6
+      - name: Sette opp node
+        uses: actions/setup-node@v6
         with:
           node-version: 22.17.1
-          cache: 'yarn'
+          cache: yarn
 
       - name: Installere dependencies
+        shell: bash
         run: yarn install --immutable
 
       - name: Bygg
@@ -53,20 +49,18 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Sette yarn-config
-        run: |
-          yarn config set npmScopes.navikt.npmRegistryServer "https://npm.pkg.github.com"
-          yarn config set npmScopes.navikt.npmAlwaysAuth true
-          yarn config set npmScopes.navikt.npmAuthToken $NPM_AUTH_TOKEN
-        env:
-          NPM_AUTH_TOKEN: ${{ secrets.READER_TOKEN }}
-
-      - uses: actions/setup-node@v6
+      - uses: ./.github/actions/setup-yarnrc
+        with:
+          npmAuthToken: ${{ inputs.npmAuthToken }}
+
+      - name: Sette opp node
+        uses: actions/setup-node@v6
         with:
           node-version: 22.17.1
-          cache: 'yarn'
-          
+          cache: yarn
+
       - name: Installere dependencies
+        shell: bash
         run: yarn install --immutable
 
       - name: Run knip