From 879d72ea442a95d3367af17a828aaf1793390bd6 Mon Sep 17 00:00:00 2001 From: Alex Welsh Date: Mon, 27 Apr 2026 09:19:45 +0100 Subject: [PATCH 1/2] Update actions to org-wide pins --- .github/workflows/helm-chart-publish.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/helm-chart-publish.yml b/.github/workflows/helm-chart-publish.yml index 178c0609041..2cec8184d1b 100644 --- a/.github/workflows/helm-chart-publish.yml +++ b/.github/workflows/helm-chart-publish.yml @@ -17,10 +17,10 @@ jobs: - name: Get SemVer version for current commit id: semver - uses: azimuth-cloud/github-actions/semver@master + uses: azimuth-cloud/github-actions/semver@8771cb1c1db134e99becf314f07db6a84b8d7fbf - name: Publish Helm charts - uses: azimuth-cloud/github-actions/helm-publish@master + uses: azimuth-cloud/github-actions/helm-publish@8771cb1c1db134e99becf314f07db6a84b8d7fbf with: token: ${{ secrets.GITHUB_TOKEN }} version: ${{ steps.semver.outputs.version }} From e0b722ac7ee5f6327699c755dac5dfe917e1af7f Mon Sep 17 00:00:00 2001 From: Alex Welsh Date: Mon, 27 Apr 2026 10:39:34 +0100 Subject: [PATCH 2/2] Add write permissions to helm publish --- .github/workflows/helm-chart-publish.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/helm-chart-publish.yml b/.github/workflows/helm-chart-publish.yml index 2cec8184d1b..62634211c56 100644 --- a/.github/workflows/helm-chart-publish.yml +++ b/.github/workflows/helm-chart-publish.yml @@ -7,6 +7,8 @@ jobs: build_push_chart: name: Build and push Helm chart runs-on: ubuntu-latest + permissions: + contents: write steps: - name: Check out the repository uses: actions/checkout@v4