The code that generates the problem is as follows:

        const tempLocation = await cafs.tempDir();
        if (allowedHosts.size > 0 && shouldUseShallow(resolution.repo, allowedHosts)) {
          await execGit(["init"], { cwd: tempLocation });
          await execGit(["remote", "add", "origin", resolution.repo], { cwd: tempLocation });
          await execGit(["fetch", "--depth", "1", "origin", resolution.commit], { cwd: tempLocation });
        } else {
          await execGit(["clone", resolution.repo, tempLocation]);
        }

The actual execution is the following command

git init
git remote add origin git+ssh://git@github.com/dominictarr/crypto-browserify.git
git -c core.longpaths=true fetch --depth 1 origin 95c5d505

After multiple steps, the following error is finally reported:
fatal: couldn't find remote ref 95c5d505
This is the fundamental reason

Remove +ssh from the url, it directly reports the above error

git init
git remote add origin git://git@github.com/dominictarr/crypto-browserify.git
git -c core.longpaths=true fetch --depth 1 origin 95c5d505

Why use git+ssh here instead of directly using git?
this makes the error very clear and understandable

While this is certainly a bug on pnpm's part, for the time being, the latest version of jsdoc (v4.0.2) can be installed successfully by pnpm.

@liangjl76 I forgot to say thank you for your own investigation on this bug, without it, it would have taken me a longer time to find the cause and solve it.

I had to temporarily revert the fix but we'll have another fix.

#6832 should fix both this bug and the other bug. Please let me know if it doesn't.

I can't install repo https://github.com/signal-ai/angular-sha1.git

ERROR  Command failed with exit code 128: git ls-remote git+ssh://git@github.com/SignalMedia/angular-sha1.git HEAD
git@github.com: Permission denied (publickey).
fatal: Could not read from remote repository.

With https protocol command git ls-remote working, with git+ssh not.

Pnpm Version 7.33.4 is ok, but 7.33.6 or 8.7.1 have this error..

@orgoj Why would you want to use ssh on a public repo?

@KSXGitHub I don't use ssh on public repo. In package.json i have https, but pnpm try git ls-remote with git+ssh.

I can't install repo https://github.com/signal-ai/angular-sha1.git

This repo doesn't even have package.json. Can you try a public repo that have one?

Repo https://github.com/signal-ai/angular-sha1.git is instalable by npm, yarn. Pnpm only version 7.33.4 install it. Last 7 or 8 version do error on install.

Repo https://github.com/signal-ai/angular-sha1.git is instalable by npm, yarn.

npm certainly does not:

Interestingly enough, pnpm@8.7.1 supports it, and run it without issue:

So I'm not sure why it fails on your machine.

8.6.x has no problem, 8.7.x will encounter the problem in the screenshot above

Not sure why this is closed, the issue is still present (tested on pnpm v9.5.0). pnpm will always use ssh even if the package.json/pnpm-lock.yaml uses an https url

Current workaround if installing in a container is to force git to clone via https for the specific packages you need, e.g.:

git config --global url."https://github.com/username/repository.git".insteadOf git@github.com:username/repository.git

#7517 I am also confused. This problem still exists in 9.6.0

facing the same issue

@KSXGitHub @zkochan Can anyone review this? This seems not correctly fixed.

Private keys are not supposed to exist on GitHub Workflows, so the following errors are throw when pnpm force using ssh to clone:

ERROR  Command failed with exit code 128: /usr/bin/git clone git@github.com:xqq/webworkify-webpack.git /home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1806_d61cc271c1b5b05961f35800d24acb7c
Cloning into '/home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1806_d61cc271c1b5b05961f35800d24acb7c'...
git@github.com: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

pnpm: Command failed with exit code 128: /usr/bin/git clone git@github.com:xqq/webworkify-webpack.git /home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1806_d61cc271c1b5b05961f35800d24acb7c
Cloning into '/home/runner/setup-pnpm/node_modules/.bin/store/v3/tmp/_tmp_1806_d61cc271c1b5b05961f35800d24acb7c'...
git@github.com: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.
    at makeError (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:17863:17)
    at handlePromise (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:18434:33)
    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)
    at async execGit (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:114189:7)
    at async gitFetcher (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:114144:11)
    at async fetcher (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:133706:[16](https://github.com/vuepress-theme-hope/vuepress-theme-hope/actions/runs/12532941022/job/34952136592#step:5:17))
    at async run (/home/runner/setup-pnpm/node_modules/.pnpm/pnpm@9.15.1/node_modules/pnpm/dist/pnpm.cjs:133156:23)
Error: Process completed with exit code 1.