npmrc in RUNNER_TEMP

lib/authutil.js

@@ -13,7 +13,7 @@ const path = __importStar(require("path"));
 const core = __importStar(require("@actions/core"));
 const github = __importStar(require("@actions/github"));
 function configAuthentication(registryUrl) {
-    const npmrc = path.resolve(process.cwd(), '.npmrc');
+    const npmrc = path.resolve(process.env['RUNNER_TEMP'] || process.cwd(), '.npmrc');
     writeRegistryToFile(registryUrl, npmrc);
 }
 exports.configAuthentication = configAuthentication;
@@ -38,7 +38,10 @@ function writeRegistryToFile(registryUrl, fileLocation) {
     }
     // Remove http: or https: from front of registry.
     const authString = registryUrl.replace(/(^\w+:|^)/, '') + ':_authToken=${NODE_AUTH_TOKEN}';
-    const registryString = scope ? `${scope}:registry=${registryUrl}` : `registry=${registryUrl}`;
+    const registryString = scope
+        ? `${scope}:registry=${registryUrl}`
+        : `registry=${registryUrl}`;
     newContents += `${registryString}${os.EOL}always-auth=true${os.EOL}${authString}`;
     fs.writeFileSync(fileLocation, newContents);
+    core.exportVariable('NPM_CONFIG_USERCONFIG', fileLocation);
 }

src/authutil.ts

@@ -5,7 +5,10 @@ import * as core from '@actions/core';
 import * as github from '@actions/github';
 
 export function configAuthentication(registryUrl: string) {
-  const npmrc: string = path.resolve(process.cwd(), '.npmrc');
+  const npmrc: string = path.resolve(
+    process.env['RUNNER_TEMP'] || process.cwd(),
+    '.npmrc'
+  );
 
   writeRegistryToFile(registryUrl, npmrc);
 }
@@ -38,4 +41,5 @@ function writeRegistryToFile(registryUrl: string, fileLocation: string) {
     : `registry=${registryUrl}`;
   newContents += `${registryString}${os.EOL}always-auth=true${os.EOL}${authString}`;
   fs.writeFileSync(fileLocation, newContents);
+  core.exportVariable('NPM_CONFIG_USERCONFIG', fileLocation);
 }