shared-actions/pnpm-build
Michael Seele 6dc474f759
All checks were successful
Aikido Security PR Check / Aikido Security Scan (pull_request) Successful in 40s
validate-shared-actions / validate-shared-actions (pull_request) Successful in 39s
fix: force public npm registry for pnpm self-installer bootstrap
pnpm/action-setup bootstraps itself via npm before pnpm is available.
If a repo has a custom registry in .npmrc (e.g. pointing to JFrog or
Nexus), the self-installer tries to fetch pnpm from that registry
without credentials and fails with exit code 1.

Setting NPM_CONFIG_REGISTRY overrides .npmrc for this step only,
ensuring pnpm is always fetched from the public registry. Private
registry auth is configured in subsequent steps once pnpm is ready.
2026-05-22 09:29:42 +02:00
..
action.yml fix: force public npm registry for pnpm self-installer bootstrap 2026-05-22 09:29:42 +02:00
README.md feat: add pnpm-build action 2026-04-30 14:02:09 +02:00

pnpm-build

Action for building and validating with PNPM.

Inputs

Input Required Default Description
working-directory No . Directory containing package.json
node-version No 24 Node.js version
pnpm-version No 10.33 pnpm version
jfrog-token No "" JFrog npm auth token for the Artifactory registry
run-scripts No ci,typecheck,build Comma-separated list of pnpm run scripts to execute
frozen-lockfile No true Pass --frozen-lockfile to pnpm install
check-dedupe No true Run pnpm dedupe --check before install

Usage

- uses: https://schmalz-git.git.onstackit.cloud/schmalz/shared-actions/pnpm-build@pnpm-build-v1
  with:
    working-directory: frontend
    jfrog-token: ${{ secrets.JFROG_TOKEN }}

Notes

  • Configures the Artifactory npm registry authentication only if jfrog-token is provided.
  • Runs pnpm dedupe --check before install when check-dedupe is true.
  • Executes each script in run-scripts in order via pnpm run.