Summary:

The changes in this pull request are focused on the release process of the DefectDojo Helm chart and do not introduce any obvious security concerns. The GitHub Actions workflow responsible for the Helm chart release follows best practices, such as pinning dependencies to specific versions and updating the Helm repository index in a separate branch. These practices help maintain the security and reliability of the release process.

The key changes include setting up the Helm CLI with a specific, known version, configuring the Bitnami Helm repository, pinning the Docker image version to the release number, packaging the Helm chart, creating a new GitHub release, and updating the Helm repository index. All of these steps are standard parts of the release process and do not raise any immediate security concerns.

Files Changed:

• .github/workflows/release-x-manual-helm-chart.yml: This file contains the GitHub Actions workflow responsible for the release of the DefectDojo Helm chart. The changes include:
  • Pinning the Helm CLI setup action to a specific commit hash to ensure a known version is used.
  • Configuring the Bitnami Helm repository and updating the dependencies for the DefectDojo Helm chart.
  • Pinning the Docker image version to the release number in the values.yaml file.
  • Packaging the DefectDojo Helm chart and storing the artifact.
  • Creating a new GitHub release and attaching the packaged Helm chart.
  • Updating the Helm repository index file (index.yaml) in a separate branch to maintain the integrity of the Helm repository.