shared-actions/publish-npm-package

publish-npm-package

Publish a PNPM package to JFrog Artifactory.

Inputs

Input	Required	Default	Description
working-directory	No	.	Directory containing package.json
node-version	No	24	Node.js version
pnpm-version	No	10.33	pnpm version
jfrog-token	Yes	—	JFrog npm auth token
registry-url	No	https://schmalz.jfrog.io/artifactory/api/npm/default-npm/	npm registry URL

Usage

- uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/publish-npm-package@publish-npm-package-v1
  with:
    working-directory: .
    jfrog-token: ${{ secrets.JFROG_TOKEN }}

Notes

• Publishes with pnpm publish.
• Configures the registry auth token from registry-url and jfrog-token.
• Third-party actions used internally are pinned to exact commit SHAs to prevent supply chain attacks.