Make security context configurable #112

	name: OCI

	on:
	push:
	tags:
	- "."
	workflow_dispatch:

	concurrency:
	group: ${{ github.workflow }}-${{ github.head_ref \|\| github.ref }}-oci
	cancel-in-progress: true

	jobs:
	build:
	name: Build
	runs-on: ubuntu-24.04
	steps:
	- name: Check out code into the Go module directory
	uses: actions/checkout@v1

	- name: Set up QEMU
	id: qemu
	uses: docker/setup-qemu-action@v1

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v1

	- name: Log in to the GitHub Container registry
	uses: docker/login-action@v2
	with:
	registry: ghcr.io
	username: 1gtm
	password: ${{ secrets.LGTM_GITHUB_TOKEN }}

	- name: Install Helm 3
	run: \|
	pushd /usr/local/bin && sudo curl -fsSLO https://github.com/x-helm/helm/releases/latest/download/helm && sudo chmod +x helm && popd

	- name: Clone charts repository
	env:
	GITHUB_USER: 1gtm
	GITHUB_TOKEN: ${{ secrets.LGTM_GITHUB_TOKEN }}
	CHART_REPOSITORY: github.com/appscode/charts
	run: \|
	url="https://${GITHUB_USER}:${GITHUB_TOKEN}@${CHART_REPOSITORY}.git"
	cd $RUNNER_WORKSPACE
	git clone $url
	cd $(basename $CHART_REPOSITORY)
	git config user.name "${GITHUB_USER}"
	git config user.email "${GITHUB_USER}@appscode.com"

	- name: Publish OCI charts
	env:
	GITHUB_USER: 1gtm
	GITHUB_TOKEN: ${{ secrets.LGTM_GITHUB_TOKEN }}
	CHART_REPOSITORY: github.com/appscode/charts
	run: \|
	export REGISTRY_0=oci://ghcr.io/appscode-charts
	./hack/scripts/update-chart-dependencies.sh
	$RUNNER_WORKSPACE/$(basename $CHART_REPOSITORY)/hack/scripts/publish-oci-charts.sh $(pwd)

Provide feedback