GitHub Actions availability

There is no public Nativify GitHub Action. The public neilhuang007/nativify repository is an issue tracker, not an action, so do not put it in a uses: step. Use a checked-in bounded HTTP client instead.

Keep NATIVIFY_API_KEY in GitHub Actions Secrets and expose it only to the protection step. Build and smoke-test the exact input, invoke the client with explicit platforms, smoke-test the protected artifact, and upload that output as an artifact. For multi-platform releases, use a runner matrix that exercises the same protected artifact on each requested target before publication.

yaml

- name: Protect
  env:
    NATIVIFY_API_KEY: ${{ secrets.NATIVIFY_API_KEY }}
    NATIVIFY_PLATFORMS: linux-x86_64
  run: ci/nativify.sh target/app.jar target/app-nativified.jar

The platform value remains an example; it must be replaced by the release's audited target list.