Skip to content

Conversation

@snazy
Copy link

@snazy snazy commented Nov 8, 2025

No description provided.


- name: Import GPG key
uses: crazy-max/ghaction-import-gpg@v6
uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Must only use use hash-references (see Actions Policy

And also only use action+version that are allowed by the policy, currently approved patterns are here

local current_version_with_dash
local version_with_dash
current_version_with_dash="$(echo "${old_version//-/--}")"
version_with_dash="$(echo "$version//-/--}")"
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dangling }

username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
run: |
echo "${{ secrets.DOCKERHUB_TOKEN }}" | docker login ghcr.io -u "${{ secrets.DOCKERHUB_USERNAME }}" --password-stdin
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IIUC this is required because the docker/login-action Github Action is not in approved_patterns.yml ?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Correct.

current_version_with_dash="$(echo "${old_version//-/--}")"
version_with_dash="$(echo "$version//-/--}")"
exec_process sed -i~ "s/${current_version_with_dash}/${version_with_dash}/" "$HELM_README_FILE"
current_version_with_dash="${old_version//-/--}"
Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This line is not needed anymore, is it?

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Correct, feel free to remove it ;)

@pingtimeout pingtimeout merged commit c2760ed into pingtimeout:releasey-workflow Nov 10, 2025
@snazy snazy deleted the releasey-workflow-review branch November 10, 2025 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants