im-open/authenticate-with-gh-package-registries

An action that adds one or more package sources with credentials to the .nuget config & .npmrc for use with package restores

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Activelast commit Jun 23, 2026
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: im-open/authenticate-with-gh-package-registries@d8e225637c95ebdc3fabfa4753b1661e12457a49 # v2.0.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
read-pkg-tokenA personal access token with the read:packages scope that has been authorized for use with each provided org and is from an account that has read access to the repo containing the package.yes
read-pkg-token-legacyA legacy organization personal access token with the read:packages scope that has been authorized for use with each provided org and is from an account that has read access to the repo containing the package.no""
orgsA comma-separated list of organizations that package sources should be added for.yeswtw-bdoim
orgs-legacyA comma-separated list of legacy organizations that package sources should be added for.no""
setup-nugetFlag indicating whether to set each org as a nuget source.notrue
setup-npmFlag indicating whether to set each org as an npm registry.notrue
nuget-package-source-mapping-patternA comma separated list of patterns with org names to use for nuget source mapping. IE my-org:Mktp* . This is the mapping for github packages orgs.no
show-config-file-contentsFlag indicating whether to output the contents of the config files to the logs for debugging purposes.nofalse

no outputs