Files
zoitechat/.github/workflows/flatpak-build.yml
deepend-tildeclub ccc6580652 Enhance Flatpak build workflow with permissions and steps
Added permissions for contents, id-token, attestations, and artifact-metadata. Included steps for uploading and attesting the Flatpak bundle.
2026-01-16 22:57:03 -07:00

48 lines
1.2 KiB
YAML

name: Flatpak Build
on:
push:
branches: [master]
pull_request:
branches: [master]
jobs:
flatpak_build:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
attestations: write
artifact-metadata: write
container:
image: ghcr.io/flathub-infra/flatpak-github-actions:gnome-49
options: --privileged
steps:
- uses: actions/checkout@v4
with:
submodules: true
- name: Build Flatpak
id: flatpak_builder
uses: flatpak/flatpak-github-actions/flatpak-builder@v6
with:
bundle: zoitechat.flatpak
manifest-path: flatpak/net.zoite.Zoitechat.json
cache-key: flatpak-builder-${{ github.sha }}
- name: Upload Flatpak Bundle
id: upload_flatpak
uses: actions/upload-artifact@v4
with:
name: zoitechat.flatpak
path: zoitechat.flatpak
- name: Attest Flatpak Bundle (Build Provenance)
if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
uses: actions/attest-build-provenance@v3
with:
subject-path: zoitechat.flatpak