relizaio/ReARM Version and Publish Helm Chart Action
GitHub Action to version and publish helm chart to an OCI compliant registry and submit the release metadata to ReARM.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 1, 2026
- License
- MIT
Pinned Snippet
uses: relizaio/rearm-helm-action@9261ed4cd8235eeae69d75589f17ebcb5fe457b5 # 1.10.2tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| registry_username | Username for chart repository | yes | — |
| registry_password | Password for chart repository | yes | — |
| registry_host | Host for chart repository | yes | — |
| helm_chart_name | Name of the helm chart | yes | — |
| rearm_api_id | ReARM API ID | yes | — |
| rearm_api_key | ReARM API KEY | yes | — |
| rearm_api_url | ReARM API URL | yes | https://demo.rearmhq.com |
| path | Path to the relative to root of the repo (default is '.') | no | . |
| ci_metadata | Metadata for CI run, (Optional - default is GitHub) | no | GitHub |
| rearm_component_id | Component UUID for this repository if org-wide key is used | no | — |
| registry_type | Type of registry, [OCI | ECR | CHARTMUSEUM - default is OCI] | no | OCI |
| aws_region | AWS region, required when registry type is ECR | no | — |
| enable_sbom | Generates SBOM and stores it along with the artifact | no | false |
| enable_public_cosign_sigstore | Sign SBOMs using public sigstore via cosign | no | false |
| successful_build_lifecycle | Status on build success to be set on ReARM (DRAFT or ASSEMBLED) | no | ASSEMBLED |
| enable_securesbom | Enable SecureSBOM by ShiftLeftCyber signing of SBOMs | no | false |
| securesbom_pub_key_id | Public key id to sign with SecureSBOM by ShiftLeftCyber | no | "" |
| securesbom_host | SecureSBOM (by ShiftLeftCyber) host | no | "" |
| securesbom_api_key | SecureSBOM (by ShiftLeftCyber) API key | no | "" |
| push_to_rearm_mirror | Push to ReARM mirror | no | false |
| rearm_mirror_api_id | ReARM Mirror API ID | yes | — |
| rearm_mirror_api_key | ReARM Mirror API KEY | yes | — |
| rearm_mirror_api_url | ReARM Mirror API URL | no | https://demo.rearmhq.com |
| rearm_mirror_component_id | Component UUID on ReARM Mirror for this release if org-wide key is used and not relying on component mapping | no | — |
| create_component | Create component if it doesn't exist | no | false |
| allow_rebuild | Allow rebuilding of existing component releases | no | false |
| git_user_name | Git user name for version bump commit | no | reliza-auto |
| git_user_email | Git user email for version bump commit | no | info@reliza.io |
| limit_to_branches | Comma-separated list of branches to build on (e.g. 'main,develop'). If empty, all branches are built. | no | "" |
Outputs
no outputs