Accept cosign terms in GHA #20
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Helm | |
| on: | |
| workflow_dispatch: {} | |
| push: | |
| tags: [ 'v*.*.*' ] | |
| jobs: | |
| release: | |
| # depending on default permission settings for your org (contents being read-only or read-write for workloads), you will have to add permissions | |
| # see: https://docs.github.com/en/actions/security-guides/automatic-token-authentication#modifying-the-permissions-for-the-github_token | |
| permissions: | |
| contents: write | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Configure Git | |
| run: | | |
| git config user.name "$GITHUB_ACTOR" | |
| git config user.email "$GITHUB_ACTOR@users.noreply.github.com" | |
| - name: Get Tag | |
| id: tagName | |
| uses: olegtarasov/get-tag@v2.1 | |
| - name: Install Helm | |
| uses: azure/setup-helm@v1 | |
| with: | |
| version: v3.8.1 | |
| - name: Install YQ | |
| uses: chrisdickinson/setup-yq@latest | |
| with: | |
| yq-version: v4.27.2 | |
| - name: Set Chart Version | |
| run: | | |
| if [ -n "${{ steps.tagName.outputs.tag }}" ]; then | |
| yq -i '.version = "${{ steps.tagName.outputs.tag }}"' deploy/helm/nexus-oidc-proxy/Chart.yaml | |
| yq -i '.appVersion = "${{ steps.tagName.outputs.tag }}"' deploy/helm/nexus-oidc-proxy/Chart.yaml | |
| else | |
| yq -i '.version = .version + "-'"${GITHUB_SHA}"'"' deploy/helm/nexus-oidc-proxy/Chart.yaml | |
| yq -i '.appVersion = "'"${GITHUB_SHA}"'"' deploy/helm/nexus-oidc-proxy/Chart.yaml | |
| fi | |
| - name: Lint | |
| run: | | |
| helm lint deploy/helm/nexus-oidc-proxy | |
| helm template deploy/helm/nexus-oidc-proxy | |
| - name: Run chart-releaser | |
| uses: helm/chart-releaser-action@v1.4.0 | |
| env: | |
| CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| with: | |
| charts_dir: deploy/helm |