| version | The version of the nsyte CLI to use (e.g., "v0.5.3", "latest"). Needs to match a tag in github.com/sandwichfarm/nsyte/releases | no | latest |
| sec | Compatibility input. Prefer nbunksec; this value is still passed to nsyte via --sec. | no | — |
| nbunksec | Recommended CI signing credential. Must start with nbunksec1; this action rejects sec1 values to discourage direct private key usage. | no | — |
| directory | The directory containing the static files to deploy. | yes | — |
| relays | Newline-separated list of Nostr relay WebSocket URIs to publish the site event to. | no | "" |
| servers | Newline-separated list of Blossom server HTTPS URLs to deploy files to. | no | "" |
| name | Deploy as a named nsite (NIP-5A). When set, the site is published under this name via --name. When omitted, the site deploys as the root (npub) nsite. | no | "" |
| force | Corresponds to the --force flag in nsyte deploy. Re-deploy all files. | no | false |
| purge | DEPRECATED: There is no deploy-time purge flag in nsyte. Use the nsyte "delete" or "undeploy" commands instead. | no | false |
| sync | Corresponds to the --sync flag in nsyte deploy. Check all servers and upload missing blobs. | no | false |
| verbose | Corresponds to the --verbose flag in nsyte deploy. Show detailed output. | no | false |
| concurrency | Corresponds to the --concurrency flag in nsyte deploy. Number of parallel deploys. | no | 4 |
| fallback | Corresponds to the --fallback flag in nsyte deploy. Path to the fallback HTML file (e.g., /index.html for SPAs). | no | "" |
| publish_server_list | true/false. If true, the server list will be published to relays. Root sites only. | no | false |
| publish_relay_list | true/false. If true, the relay list will be published to relays. Root sites only. | no | false |
| publish_profile | true/false. If true, the profile will be published to relays. Root sites only. | no | false |
| use_fallback_relays | If true, include default nsyte relays in addition to configured ones. | no | false |
| use_fallback_servers | If true, include default nsyte blossom servers in addition to configured ones. | no | false |
| publish_app_handler | If true, publish NIP-89 app handler announcement (Kind 31990). | no | false |
| handler_kinds | Comma-separated event kinds the nsite can handle. Only used when publish_app_handler is true. | no | "" |
| skip_secrets_scan | If true (default), pass --skip-secrets-scan to nsyte to bypass the pre-deploy secrets scan. Set to "false" to let nsyte scan the deploy directory for credentials before publishing. Requires an nsyte version that supports the flag; ignored automatically on older versions. | no | true |
| scan_level | Secrets scan sensitivity passed to nsyte via --scan-level (low, medium, high). Only applied when skip_secrets_scan is false. Leave blank to use the nsyte default. | no | "" |