Merge pull request #11331 from stevenhorsman/helm-ghcr-login-update

workflow: Remove code injection in helm login
This commit is contained in:
Steve Horsman 2025-06-21 08:13:40 +01:00 committed by GitHub
commit 4bfa74c2a5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -253,7 +253,7 @@ jobs:
- name: Login to the OCI registries
run: |
echo "${{ secrets.QUAY_DEPLOYER_PASSWORD }}" | helm registry login quay.io --username "${{ vars.QUAY_DEPLOYER_USERNAME }}" --password-stdin
echo "${{ github.token }}" | helm registry login ghcr.io --username "${{ github.actor }}" --password-stdin
echo "${{ github.token }}" | helm registry login ghcr.io --username $ --password-stdin
- name: Push helm chart to the OCI registries
run: |