ci: Update per Q3 audit findings (#3194)

* ci: Update per Q3 audit findings

Signed-off-by: Mihail Mihov <[email protected]>

* ci: Disable npm cache

Signed-off-by: Mihail Mihov <[email protected]>

---------

Signed-off-by: Mihail Mihov <[email protected]>

Author: mishomihov00

.github/CODEOWNERS

@@ -25,8 +25,8 @@
 # NOTE: Must be placed last to ensure enforcement over all other rules
 
 # Protection Rules for Github Configuration Files and Actions Workflows
-/.github/                                       @hashgraph/release-engineering @hashgraph/release-engineering-managers
-/.github/workflows/                             @hashgraph/release-engineering @hashgraph/release-engineering-managers @AlfredoG87 @ebadiere @Nana-EC @hashgraph/hedera-smart-contracts-product
+/.github/                                       @hashgraph/devops-ci @hashgraph/devops-ci-committers @hashgraph/release-engineering @hashgraph/release-engineering-managers
+/.github/workflows/                             @hashgraph/devops-ci @hashgraph/devops-ci-committers @hashgraph/release-engineering @hashgraph/release-engineering-managers @AlfredoG87 @ebadiere @Nana-EC @hashgraph/hedera-smart-contracts-product
 
 # Self-protection for root CODEOWNERS files (this file should not exist and should definitely require approval)
 /CODEOWNERS                                     @hashgraph/release-engineering @hashgraph/release-engineering-managers

.github/workflows/dapp.yml

@@ -34,8 +34,8 @@ jobs:
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
         with:
           node-version: 20
-          cache: "npm"
-          cache-dependency-path: "**/package-lock.json"
+          #cache: "npm" Disabling this as it causes the workflow to hang, trying to retrieve the cache. Not removing it, because it could be retuned in the future.
+          #cache-dependency-path: "**/package-lock.json"
 
       - name: Install build tools
         run: sudo apt-get update && sudo apt-get install -y make gcc g++