For signing private packages, it would be helpful to add an input for rootUrls, to be used something like this: run: ${{ github.action_path }}/pm.sh sign -- --rootUrls ${{ secrets.SIGN_ROOT_URLS }}