keboola/Update Service Image Tag
Updates image tags in Helm charts and creates PRs
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 8, 2026
- License
- None
Pinned Snippet
uses: keboola/helm-image-updater@c9e0c12c4ecbcffe37026e2f3829005ac2e545e0 # v0.22.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| helm-chart | The Helm chart to update | yes | — |
| image-tag | Updates image.tag in tag.yaml | yes | — |
| dry-run | Do a dry run | no | false |
| deploy-strategy | Promoter deploy strategy: standard | gradual | critical | critical-manual-gate | manual-per-stack | rollback (empty = standard). Production deploys are always promoter-managed; auto-merge is decided by tag class + target stacks. | no | "" |
| commit-sha | Store commit SHA in tag.yaml | no | false |
| extra-tag1 | Extra tag 1 to update (format: path.in.yaml:value) | no | "" |
| extra-tag2 | Extra tag 2 to update (format: path.in.yaml:value) | no | "" |
| override-stack | Stack ID to explicitly target for the update, bypassing automatic stack selection. | no | "" |
| metadata | Base64 encoded JSON with trigger metadata | no | "" |
| approve-token | GitHub token from a machine user (CODEOWNERS team member) to auto-approve the unmerged PRs so release-promoter (or a human) can merge them | yes | — |
| github-token | GitHub token for authentication | yes | — |
Outputs
no outputs