search

pnpm / action-setup

Install pnpm package manager
https://github.com/marketplace/actions/setup-pnpm
MIT License
899 stars 87 forks source link

Publisher verification #43

Open ghost opened 2 years ago

ghost commented 2 years ago

Some companies have pretty strict repository security settings, and it is currently not possible to use pnpm (in github actions) in an organization where Allow Marketplace actions by verified creators is enabled.

I noticed that the pnpm organization has verified it's domain, so according the docs, pnpm should be able to apply for publisher verification.

Is this possible? or is there something preventing it from happening?

zkochan commented 2 years ago

For some reason, I can't.

image

ghost commented 2 years ago

It seems I (like many others) misread the docs I linked in the issue description. According to this thread an organization can only receive verified creator status on their actions if they are a partner of github (read more here).

This process seems to be much more complicated, and I understand if it is beyond the scope of pnpm as an organization. Sorry for not realizing this when I opened the issue, you can close this whenever 😄

moander commented 1 year ago

My solution is curl bash. It's lightning fast. pnpm+nodejs installed in 2+3 seconds!

      - name: Install pnpm
        run: curl -fsSL https://gist.githubusercontent.com/moander/94dca738d0b5b8acacbf898348f7d98a/raw/e209ffa62697a06a40470aaabd20304eb00753fb/pnpm-install.sh | bash -

      - name: Detect .node-version
        run: curl -fsSL https://gist.githubusercontent.com/moander/94dca738d0b5b8acacbf898348f7d98a/raw/e209ffa62697a06a40470aaabd20304eb00753fb/node-version.sh | bash -

      - run: pnpm -g env use ${{ env.NODE_VERSION }}
image