aetherpak/AetherPak Flatpak Registry Publisher

Build a Flatpak, push OCI layers to a registry, update the static index, and publish it to GitHub Pages.

View on GitHub

Trust Signals

Scorecard Score: not yet scored
Maintenance Recency: Activelast commit Jun 19, 2026
License: MIT

Pinned Snippet

workflow.ymlSHA-pinned

uses: aetherpak/actions@52e530594cb15184200d988aac90e3d9efa8a1f8 # v3.11.2

tags can be moved; commit SHAs can't. why a SHA?

Inputs

name	description	required	default
manifest-path	Path to the Flatpak manifest (JSON/YAML) within the checked-out sources.	no	""
prebuilt-bundle-path	Path to a pre-built .flatpak bundle file (alternative to manifest-path).	no	""
prebuilt-repo-path	Path to an existing OSTree repository directory (alternative to manifest-path).	no	""
app-id	Reverse-DNS app id (fallback if not building/resolving from repository).	no	""
branch	Flatpak branch (channel). When unset: 'stable' on tag pushes, 'beta' on the default branch, else the git ref name.	no	""
arch	Flatpak CPU architecture (e.g. x86_64, aarch64).	no	x86_64
run-linter	Whether to run flathub manifest and repository linters.	no	true
cache	Whether to cache flatpak runtimes and builder files.	no	true
repo-path	The OSTree repository path.	no	_repo
builder-args	Extra flatpak-builder flags for manifest builds, one per line (e.g. --install-deps-from=flathub). Ignored for bundle/repo imports.	no	""
upload-bundle	Export the built application as a single .flatpak bundle and upload it as a workflow artifact.	no	false
registry	OCI registry host (e.g. ghcr.io).	no	ghcr.io
insecure-registry	Whether to skip TLS verification for the OCI registry (default: false).	no	false
oci-repository	Target registry repository path without host (defaults to GITHUB_REPOSITORY).	no	""
pages-url	The final public URL where Pages will serve this (e.g. https://owner.github.io/repo).	no	""
registry-token	Registry auth token (defaults to the GitHub token, used for GHCR). If blank, login is skipped.	no	${{ github.token }}
upload-pages-artifact	Whether to upload the generated website as a GitHub Pages artifact.	no	true
landing-page	Write the static landing page (index.html). Set false to use your own page built from index/static.	no	true
pages-artifact-name	The name of the uploaded Pages artifact.	no	github-pages
site-dir	The directory where the landing page, index, and repo files are generated.	no	_site
signing	Image signing mode: auto (sign iff a key is set), gpg (require a key), or off.	no	auto
gpg-private-key	ASCII-armored GPG private key used to sign images. Empty disables signing under 'auto'.	no	""
gpg-private-key-passphrase	Passphrase for the GPG private key, if it is protected.	no	""
sig-dir	Site-relative directory for signatures, the public key, and signing.json.	no	sigs
runtime-repo	RuntimeRepo URL written into each .flatpakref so one-click installs can fetch the app's runtime. Empty omits it.	no	https://dl.flathub.org/repo/flathub.flatpakrepo
refs-dir	Site-relative directory for the generated per-app .flatpakref files.	no	refs
site-subpath	Optional subdirectory under site-dir to structure the repository files (e.g. flatpak).	no	""
remote-name	Flatpak remote name and .flatpakrepo filename. Defaults to '<owner>-<repo>'.	no	""
cli-version	aetherpak CLI version to install if missing (ignored if already on PATH).	no	v0.32.0
cache-key	Custom cache key prefix for caching build state. When unset, a default prefix including the manifest hash is used.	no	""
cache-state	Cache flatpak-builder state (downloads and built modules).	no	true
cache-ccache	Cache ccache compiler artifacts.	no	true
cache-build-dir	Cache flatpak-builder build directories (requires --keep-build-dirs in builder-args).	no	false

Outputs

name	description
repo-path	Path to the OSTree repository containing the application.
app-id	Resolved Reverse-DNS Application ID.
branch	Resolved Flatpak branch.
arch	Resolved application architecture.
bundle-path	Path to the generated .flatpak bundle (only if manifest-path was set).
bundle-artifact-name	Name of the uploaded bundle artifact (only if manifest-path was set and upload-bundle is true).
signing-path	Which signing path ran: 'gpg' or 'off'.
public-key-url	Public URL of the exported public key, or empty when unsigned.
signature-lookaside-url	Public URL of the signature lookaside directory, or empty when unsigned.