From 3de233e6a279f83fa5d411d537fde3a9fd1e370d Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Tue, 30 Jun 2026 23:28:43 +0000 Subject: [PATCH 1/4] fix: use external-secrets.io/v1 API for Red Hat ESO compatibility --- templates/ssh-key-eso.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/ssh-key-eso.yaml b/templates/ssh-key-eso.yaml index 5c5a2a2..84f44a8 100644 --- a/templates/ssh-key-eso.yaml +++ b/templates/ssh-key-eso.yaml @@ -1,6 +1,6 @@ {{- if and (dig "coco" "enableSSHDebug" false .Values.global) (ne (.Values.global.secretStore.backend | default "none") "none") (eq (.Values.global.clusterPlatform | default "") "Azure") }} --- -apiVersion: "external-secrets.io/v1beta1" +apiVersion: "external-secrets.io/v1" kind: ExternalSecret metadata: annotations: From 2f6919f30d635840afdf8ed346a9aec50ef58cc5 Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Thu, 16 Jul 2026 05:50:47 +0000 Subject: [PATCH 2/4] chore: bump version to 0.2.1 Co-Authored-By: Claude Opus 4.6 (1M context) --- Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Chart.yaml b/Chart.yaml index 48d8b6a..1d58957 100644 --- a/Chart.yaml +++ b/Chart.yaml @@ -6,4 +6,4 @@ keywords: - confidential-computing - confidential-containers name: sandboxed-containers -version: 0.2.0 +version: 0.2.1 From d55ab0632b8035e90fcc76065a7919d11ea16ff8 Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Thu, 16 Jul 2026 16:01:33 +1000 Subject: [PATCH 3/4] chore: helm docs Signed-off-by: Chris Butler --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 8ae5944..ce6aa84 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # sandboxed-containers -![Version: 0.2.0](https://img.shields.io/badge/Version-0.2.0-informational?style=flat-square) +![Version: 0.2.1](https://img.shields.io/badge/Version-0.2.1-informational?style=flat-square) A Helm chart to provide an opinionated deployment of Sandboxed Containers in a validated pattern From 40c80410b35dced69c3b32db692363e3ee0b43e2 Mon Sep 17 00:00:00 2001 From: Chris Butler Date: Thu, 16 Jul 2026 06:31:28 +0000 Subject: [PATCH 4/4] ci: pin actions/checkout to SHA with correct version tag Update from @v5 to SHA-pinned @de0fac2e (v6.0.2) matching upstream main. Fixes zizmor ref-version-mismatch warning. Co-Authored-By: Claude Opus 4.6 (1M context) --- .github/workflows/helm-lint.yml | 2 +- .github/workflows/helm-unittest.yml | 2 +- .github/workflows/superlinter.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/helm-lint.yml b/.github/workflows/helm-lint.yml index 91516fd..28fe157 100644 --- a/.github/workflows/helm-lint.yml +++ b/.github/workflows/helm-lint.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Setup helm uses: azure/setup-helm@v4 diff --git a/.github/workflows/helm-unittest.yml b/.github/workflows/helm-unittest.yml index c13ed1b..2d6d1d9 100644 --- a/.github/workflows/helm-unittest.yml +++ b/.github/workflows/helm-unittest.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run make helmlint run: | diff --git a/.github/workflows/superlinter.yml b/.github/workflows/superlinter.yml index 0fa5c65..84186c1 100644 --- a/.github/workflows/superlinter.yml +++ b/.github/workflows/superlinter.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v5 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: # Full git history is needed to get a proper list of changed files within `super-linter` fetch-depth: 0