Skip to content

Pin update-helm-repo workflows to workflow-stable - #7

Merged
mhjacks merged 1 commit into
mainfrom
chore/pin-update-helm-repo-workflow-stable
Sep 25, 2026
Merged

mhjacks merged 1 commit into
mainfrom
chore/pin-update-helm-repo-workflow-stable

Conversation

@mhjacks

@mhjacks mhjacks commented Sep 25, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Replace hard-coded commit SHA pins on the reusable helm-charts workflows with @workflow-stable
  • Add zizmor ignore annotations for unpinned-uses / excessive-permissions / secrets-inherit to match the org standard workflow file

Test plan

  • Confirm workflow YAML still validates
  • On next chart version tag, confirm helmlint + update-helm-repo jobs resolve @workflow-stable successfully

Made with Cursor

Use the shared workflow-stable ref with zizmor ignore annotations instead of a hard-coded commit SHA.

Co-authored-by: Cursor <cursoragent@cursor.com>
@mhjacks
mhjacks merged commit 0f72c38 into main Sep 25, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant