Skip to content

Pin update-helm-repo workflows to workflow-stable - #3

Merged
mhjacks merged 2 commits into
mainfrom
chore/pin-update-helm-repo-workflow-stable
Sep 25, 2026
Merged

mhjacks merged 2 commits into
mainfrom
chore/pin-update-helm-repo-workflow-stable

Conversation

@mhjacks

@mhjacks mhjacks commented Sep 25, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Replace hard-coded commit SHA pins on the reusable helm-charts workflows with @workflow-stable
  • Add zizmor ignore annotations for unpinned-uses / excessive-permissions / secrets-inherit to match the org standard workflow file

Test plan

  • Confirm workflow YAML still validates
  • On next chart version tag, confirm helmlint + update-helm-repo jobs resolve @workflow-stable successfully

Made with Cursor

Martin Jackson and others added 2 commits September 25, 2026 10:56
Use the shared workflow-stable ref with zizmor ignore annotations instead of a hard-coded commit SHA.

Co-authored-by: Cursor <cursoragent@cursor.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@mhjacks
mhjacks merged commit 8e5aa3c into main Sep 25, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant