mirror of
https://github.com/submariner-io/submariner-charts.git
synced 2026-09-20 22:40:34 +00:00
Daniel FarrellandThomas Pantelis
eea398da4e
Per GitHub's security guidelines, GHAs should be pinned using full length commit SHAs instead of tags. The SHAs are of the commits currently resolved by the versions. Even "trusted" GHAs from GitHub developers are pinned because it's possible their repo rights could be compromised and a malicious GHA published. These core repos are not frequently substantially updated. Submariner-internal GHAs are left pinned at devel because we want automatic updates from Shipyard's shared tooling. Signed-off-by: Daniel Farrell <dfarrell@redhat.com>
34 lines
691 B
YAML
34 lines
691 B
YAML
---
|
|
name: Release Charts
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- devel
|
|
|
|
jobs:
|
|
release:
|
|
name: Release
|
|
if: github.repository_owner == 'submariner-io'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@5a4ac9002d0be2fb38bd78e4b4dbde5606d7042f
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Configure Git
|
|
run: |
|
|
git config user.name "$GITHUB_ACTOR"
|
|
git config user.email "$GITHUB_ACTOR@users.noreply.github.com"
|
|
|
|
- name: Update the charts
|
|
run: |
|
|
make release
|
|
|
|
- name: Push the charts
|
|
run: |
|
|
git add charts/*
|
|
git commit -m "Chart update"
|
|
git push
|