Skip to content

pnpm/setup Github action is not certified and can't be used in (some at least) Enterprise settings #35

Open

Description

@nicolastoulemont

Hello,

Many thanks for making this GitHub action which I'm very happy to use to in personal projects.

However, since the pnpm/setup GitHub action isn't certified by GitHub, we can't use for at work, in an Enterprise setting, for security related issues (I know...).

Image

I'm not aware of how hard/annoying getting it certified is but it would help a lot if it was :)
Happy to help on that if possible/needed

Have a nice day!

Activity

  1. nicholi commented on Oct 15, 2026

    @nicholi

    Just ran into same issue with our enterprise. I think the blocker is more likely that the pnpm org is not a "verified creator" within Github Marketplace. I don't know about "certification" but assuming it might just be referring to the same thing.

    Typically this would be the settings area within your repo where you'll see what is blocking any old github action:
    Image

    Since the the repository is already part of an org (pnpm), it's primarily about ticking on a few security related things, and just having all public info being correct
    https://docs.github.com/en/apps/github-marketplace/github-marketplace-overview/applying-for-publisher-verification-for-your-organization
    https://docs.github.com/en/apps/github-marketplace/github-marketplace-overview/about-marketplace-badges

    Verification is otherwise free.

    A temporary workaround anyone can use, is to otherwise fork the repo into your org and simply use that.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions