flatt-security/Setup Takumi Guard npm Registry
Authenticate to the Takumi byGMO Guard npm registry via OIDC. Works with npm, pnpm, and yarn.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Apr 15, 2026
- License
- MIT
Pinned Snippet
uses: flatt-security/setup-takumi-guard-npm@9a5d797c2085b6326d3a2985c08e3a114b9b88c1 # v1.1.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| bot-id | Bot ID from Shisho Cloud byGMO console. Omit for anonymous mode (Tier A blocking only). | no | "" |
| sts-url | STS service URL | no | https://sts.cloud.shisho.dev |
| registry-url | npm registry URL | no | https://npm.flatt.tech |
| expires-in | Token expiration in seconds (max 86400) | no | 1800 |
| set-registry | Set the registry URL in .npmrc. Set to false if you manage the registry yourself. | no | true |
Outputs
| name | description |
|---|---|
| registry-url | The npm registry URL |
| token | The access token for the registry (empty in anonymous mode) |
| token-expires-at | ISO 8601 timestamp when the token expires |