actions-marketplace-validations/Publish Native Installers

Publish jDeploy Bundles on Github or npm

Trust Signals

workflow.ymlSHA-pinned

uses: actions-marketplace-validations/shannah_jdeploy@382bbd2f7bfc7c6cc68f946864c5bf8f8907f70b # no releases — HEAD as of 2026-07-10

tags can be moved; commit SHAs can't. why a SHA?

name	description	required	default
deploy_target	Target deployment destination (npm or github).	—	github
github_token	Github token	no	—
npm_token	npm token	no	—
jdeploy_version	The version of Jdeploy	—	6.1.1
jdeploy_registry_url	The URL of the jDeploy application registry	no	https://www.jdeploy.com/
target_repository	Optional target repository where to publish releases.	no	${{ github.repository }}
require_existing_jdeploy_tag	Fail if jdeploy tag doesn't exist (strict mode for established projects). Set to 'true' for projects that should always have a jdeploy tag. This prevents accidental data loss by ensuring package-info.json exists before updating.	no	false
win_signing_certificate	Base64-encoded PFX/PKCS12 certificate for Windows Authenticode signing.	no	—
win_signing_password	Password/PIN for the Windows signing keystore or PKCS#11 token.	no	—
win_signing_keystore_type	Keystore type: PKCS12 (default), JKS, or PKCS11.	no	—
win_signing_pkcs11_config	Path to the PKCS#11 provider configuration file (for HSM signing).	no	—
win_signing_key_alias	Alias of the signing key within the keystore. Defaults to first alias.	no	—
win_signing_key_password	Password for the private key (if different from keystore password).	no	—
win_signing_timestamp_url	RFC 3161 timestamp server URL.	no	—
win_signing_hash_algorithm	Hash algorithm for the signature (e.g. SHA-256).	no	—
win_signing_description	Description embedded in the Authenticode signature.	no	—
win_signing_url	URL embedded in the Authenticode signature.	no	—

no outputs