gitea/helm-chart
45
55
Fork 126
Code Issues 32 Pull Requests 8 Actions Releases 87 Activity

Properly lock chart dependencies #326

Merged
luhahn merged 2 commits from justusbunsi/helm-chart:dependency-hardening into master 2022-06-15 07:37:25 +00:00
Conversation 0 Commits 2 Files Changed 3 +19 -5

2 Commits

Author SHA1 Message Date
justusbunsi
4aa52169c3
Merge remote-tracking branch 'upstream/master' into dependency-hardening
All checks were successful
continuous-integration/drone/pr Build is passing
Details
2022-06-13 13:09:17 +02:00
justusbunsi
20c727a5a0
Properly lock chart dependencies
All checks were successful
continuous-integration/drone/pr Build is passing
Details 
As mentioned in the Bitnami chart issue, they've created a git tag to
represent the latest full content `index.yaml`. This should be used
instead of a commit that could be changed.

https://github.com/bitnami/charts/issues/10539#issuecomment-1152641771

I've also removed the `Chart.lock` file from the ignore list. This file
ensures correct dependency retrieval when using `helm dependency build`.

https://helm.sh/docs/helm/helm_dependency_build/#helm-dependency-build

Signed-off-by: justusbunsi <sk.bunsenbrenner@gmail.com>
 2022-06-11 12:33:38 +02:00