Merge pull request #235 from coredns/dependabot/github_actions/docker… #130
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release Charts | |
| on: | |
| push: | |
| branches: | |
| - master | |
| jobs: | |
| release: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write # needed to pull git repo and create "chart-release" | |
| id-token: write # needed for signing the images with GitHub OIDC Token | |
| packages: write # for pushing and signing container images. | |
| steps: | |
| - name: Install Cosign | |
| uses: sigstore/cosign-installer@v3.10.0 | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3.6.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Checkout | |
| uses: actions/checkout@v5 | |
| with: | |
| fetch-depth: 0 | |
| - name: Configure Git | |
| run: | | |
| git config user.name "$GITHUB_ACTOR" | |
| git config user.email "$GITHUB_ACTOR@users.noreply.github.com" | |
| - name: Run chart-releaser | |
| uses: helm/chart-releaser-action@v1.7.0 | |
| env: | |
| CR_TOKEN: "${{ secrets.GITHUB_TOKEN }}" | |
| CR_GENERATE_RELEASE_NOTES: true | |
| - name: Publish chart to ghcr.io | |
| run: | | |
| helm package charts/coredns | |
| helm push coredns-*.tgz oci://ghcr.io/coredns/charts | |
| rm -rf coredns-*.tgz | |
| - name: Sign artifacts with Cosign | |
| env: | |
| COSIGN_EXPERIMENTAL: 1 | |
| working-directory: charts/coredns | |
| run: |- | |
| cosign sign ghcr.io/coredns/charts/coredns:$(yq .version Chart.yaml) --yes |