charts/.forgejo/workflows/validate-charts.yaml

name: Chart Validation
on:
  pull_request:
    paths:
    - 'charts/**'
    branches:
    - 'main'
  push:
    paths:
    - 'charts/**'
    branches:
    - 'main'

jobs:
  charts-changed:
    name: Get Charts being Changed
    runs-on: flakes-action
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: List changed charts
      id: changed-charts
      run: |
        changed=$(ct --config .forgejo/ct.yaml list-changed | tr '\n' ' ' | jq -R -s -c 'split(" ") | map(select(length > 0))')
        if [[ -n "$changed" ]]; then
          echo "changesExist=true" >> $GITHUB_ENV
          echo "::set-output name=reposChanged::$changed"  # Sets output as a JSON array
        fi
    outputs:
      reposChanged: ${{ steps.changed-charts.outputs.reposChanged }}
      changesExist: ${{ env.changesExist }}

  validate-linting:
    name: "Validate: Linting"
    needs: charts-changed
    if: needs.charts-changed.outputs.changesExist == 'true'
    runs-on: flakes-action
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0

    - name: Linting Changed Repositories
      run: |
        repos='${{ needs.charts-changed.outputs.reposChanged }}'
        for repo in $(echo $repos | jq -r '.[]'); do
          echo "Linting $repo"
          ct --config .forgejo/ct.yaml lint "$repo"
        done

  validate-audit:
    name: "Validate: Audit"
    needs: charts-changed
    if: needs.charts-changed.outputs.changesExist == 'true'
    runs-on: flakes-action
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: Auditing changed charts
      run: |
        repos='${{ needs.charts-changed.outputs.reposChanged }}'
        for repo in $(echo $repos | jq -r '.[]'); do
          echo "Auditing $repo"
          polaris audit --helm-chart "$repo" \
            --helm-values "$repo/values.yaml" \
            --format pretty \
            --set-exit-code-on-danger \
            --set-exit-code-below-score 90
        done

  validate-api:
    name: "Validate: Outdated APIs"
    needs: charts-changed
    if: needs.charts-changed.outputs.changesExist == 'true'
    runs-on: flakes-action
    steps:
    - name: Checkout
      uses: actions/checkout@v4
      with:
        fetch-depth: 0
    - name: Checking changed charts for outdated APIs
      run: |
        repos='${{ needs.charts-changed.outputs.reposChanged }}'
        for repo in $(echo $repos | jq -r '.[]'); do
          echo "Checking deprecated apiVersions for $repo"
          helm template "$repo" -f "$repo/ci/pluto-values.yaml" | pluto detect - --ignore-deprecations
        done
    #with:
    #  FORGEJO_API_URL=https://code.252.no/api/v1
    #  FORGEJO_TOKEN=123 
    #  REPO_OWNER=tommy 
    #  REPO_NAME=charts 
    #  ISSUE_INDEX=115