GitHub Action to install and configure the DevHelm CLI for monitoring-as-code workflows.

- uses: actions/checkout@v4
- uses: devhelmhq/setup-devhelm@v1
- run: devhelm validate

- uses: devhelmhq/setup-devhelm@v1
  with:
    devhelm-version: '0.1.4'

- uses: devhelmhq/setup-devhelm@v1
  with:
    api-token: ${{ secrets.DEVHELM_API_TOKEN }}
    org-id: ${{ vars.DEVHELM_ORG_ID }}
    workspace-id: ${{ vars.DEVHELM_WORKSPACE_ID }}
    verify-connection: true

name: DevHelm Monitoring as Code

on:
  push:
    branches: [main]
    paths: ['devhelm.yml']
  pull_request:
    paths: ['devhelm.yml']

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: devhelmhq/setup-devhelm@v1
      - run: devhelm validate

  deploy:
    if: github.ref == 'refs/heads/main'
    needs: validate
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: devhelmhq/setup-devhelm@v1
        with:
          api-token: ${{ secrets.DEVHELM_API_TOKEN }}
          org-id: ${{ vars.DEVHELM_ORG_ID }}
          workspace-id: ${{ vars.DEVHELM_WORKSPACE_ID }}
          verify-connection: true
      - run: devhelm deploy devhelm.yml
      - run: devhelm status --output json

1. Node.js — detects an existing node on PATH; if it's >=18, the action keeps it and skips actions/setup-node entirely. Otherwise it installs node-version (default 20) via actions/setup-node.
2. Cache — restores ~/.npm cache keyed on OS + CLI version
3. Install — runs npm install -g devhelm@<version>
4. Environment — exports DEVHELM_API_TOKEN, DEVHELM_API_URL, DEVHELM_ORG_ID, DEVHELM_WORKSPACE_ID for all subsequent steps
5. Verify — optionally runs devhelm auth me to fail fast on bad credentials

If your workflow already runs actions/setup-node@v4 (or otherwise pins a Node version) before this action, your Node version is preserved. The action only installs Node when none is on PATH or the detected major is <18. You no longer need to set node-version: '' to avoid being silently downgraded.

• Never hardcode tokens in workflow files. Use GitHub Secrets.
• The api-token input is passed through environment variables, never logged.
• For org/workspace IDs (non-sensitive), use GitHub Variables.

• Node.js >= 18 — if not present (or the detected version is <18), the action installs Node 20 by default. Any pre-existing Node >=18 set up by an earlier step is left untouched. Set node-version: '' to skip the install fallback entirely (the action will then error if Node is missing).
• npm — ships with Node.js.

MIT — see LICENSE.