Files
versitygw/.github/workflows/helm-chart.yml
dependabot[bot] 1ec724b7a4 chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-30 21:59:18 +00:00

54 lines
1.6 KiB
YAML

name: Release Helm Chart
on:
push:
branches:
- main
jobs:
release:
runs-on: ubuntu-latest
permissions:
packages: write
id-token: write
steps:
- name: Checkout
uses: actions/checkout@v6
- name: Check if chart should be updated
id: check
run: |
version=$(yq '.version' chart/Chart.yaml)
echo "version=$version" >> "$GITHUB_OUTPUT"
if helm show chart oci://ghcr.io/versity/versitygw/charts/versitygw --version "$version" 2>/dev/null; then
echo "No chart update detected."
echo "new=false" >> "$GITHUB_OUTPUT"
else
echo "Chart update detected. Updating to $version."
echo "new=true" >> "$GITHUB_OUTPUT"
fi
- name: Package chart
if: steps.check.outputs.new == 'true'
run: helm package chart/
- name: Login to GHCR
if: steps.check.outputs.new == 'true'
uses: docker/login-action@v4
with:
registry: ghcr.io
username: versity
password: ${{ secrets.GITHUB_TOKEN }}
- name: Push chart
if: steps.check.outputs.new == 'true'
run: helm push versitygw-${{ steps.check.outputs.version }}.tgz oci://ghcr.io/versity/versitygw/charts
- name: Install cosign
if: steps.check.outputs.new == 'true'
uses: sigstore/cosign-installer@v4.1.1
- name: Sign chart with cosign
if: steps.check.outputs.new == 'true'
run: cosign sign --yes ghcr.io/versity/versitygw/charts/versitygw:${{ steps.check.outputs.version }}