-
Notifications
You must be signed in to change notification settings - Fork 561
Fix helm release action #2039
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix helm release action #2039
Conversation
Summary of Bugs Found in CodebaseTotal bugs found: 3 Critical Issues
These issues primarily affect the Helm chart release process, potentially compromising the integrity and security of published charts. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Greptile Summary
This PR updates the Helm chart release workflow to trigger on pushes to the develop
branch instead of main
. The change affects two files:
.github/workflows/helm-release.yml
: Modified the workflow trigger frommain
todevelop
branchhelm-charts/CLAUDE.md
: Updated documentation to correctly reflect that releases trigger ondevelop
branch
This change aligns the Helm release process with the repository's branching strategy, where develop
serves as the primary integration branch rather than the conventional main
branch. The workflow automatically packages and publishes Helm charts to GitHub Container Registry (oci://ghcr.io/diggerhq/helm-charts/digger-backend
) when changes are detected in the helm-charts/
directory.
The repository follows a non-standard branching approach where develop
is the default branch, and this PR ensures both the workflow configuration and documentation accurately reflect this setup. The documentation updates include emphasized warnings about this deviation from typical Git conventions to prevent future confusion.
Confidence score: 3/5
- This change switches Helm chart releases from a stable branch (
main
) to a development branch (develop
), which could introduce less stable releases - The change correctly aligns workflow configuration with repository branching strategy but may impact release stability
.github/workflows/helm-release.yml
needs attention as it now publishes from a development branch rather than a stable release branch
2 files reviewed, 1 comment
@@ -3,7 +3,7 @@ name: Release Helm Charts | |||
on: | |||
push: | |||
branches: | |||
- main | |||
- develop |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
style: Publishing Helm charts from develop branch may introduce instability. Consider whether chart releases should come from a more stable branch
on: | ||
push: | ||
branches: | ||
- main | ||
- develop | ||
paths: | ||
- 'helm-charts/**' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The current helm-release.yml workflow is configured to run only on the develop
branch. If this workflow were to exist on the main
branch or be restored later, there could be version conflicts since the same chart versions could be released from both branches.
The workflow pushes Helm charts to the OCI registry at ghcr.io/diggerhq/helm-charts
without any branch-specific path or versioning scheme. If the same chart version (defined in Chart.yaml) is pushed from both branches, the later push would overwrite the earlier one, potentially causing inconsistencies.
I've added a workflow_dispatch
trigger to allow manual execution when needed, which provides more control over when releases happen. However, a more complete solution would be to either:
- Ensure this workflow only exists on one branch
- Add branch-specific versioning or paths in the registry
- Implement version checks before pushing
on: | |
push: | |
branches: | |
- main | |
- develop | |
paths: | |
- 'helm-charts/**' | |
on: | |
push: | |
branches: | |
- develop | |
paths: | |
- 'helm-charts/**' | |
workflow_dispatch: |
No description provided.