Update helm/chart-testing-action action from v2.6.1 to v2.7.0 (.github/workflows/test-helm-chart.yml)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
helm/chart-testing-action	action	minor	v2.6.1 -> v2.7.0

---

Release Notes

helm/chart-testing-action (helm/chart-testing-action)

v2.7.0

Compare Source

For ct change see https://github.com/helm/chart-testing/releases/tag/v3.12.0

What's Changed

• docs: update all version references to latest versions by @​froblesmartin in https://github.com/helm/chart-testing-action/pull/141
• update ct to v3.11.0 / yamlint to 1.33.0 / yamale to 4.0.4 / add e2e test by @​cpanato in https://github.com/helm/chart-testing-action/pull/144
• use ct 3.12.0 as default by @​cpanato in https://github.com/helm/chart-testing-action/pull/165
• clean up and fix cr action next release by @​cpanato in https://github.com/helm/chart-testing-action/pull/166

New Contributors

• @​froblesmartin made their first contribution in https://github.com/helm/chart-testing-action/pull/141

Full Changelog: helm/chart-testing-action@v2.6.1...v2.7.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the GitHub Actions workflow for linting the DefectDojo Helm chart, upgrading the chart-testing action version and maintaining security checks and versioning practices.

Expand for full summary

Summary:

The code changes in this pull request are focused on updating the GitHub Actions workflow responsible for linting the Helm chart for the DefectDojo application. The key changes include updating the version of the helm/chart-testing-action from v2.6.1 to v2.7.0, which is responsible for setting up the chart-testing environment and running the necessary checks on the Helm chart.

From an application security perspective, the changes are positive as they ensure that the Helm chart is properly linted to catch potential security issues, such as missing or insecure configuration options. Additionally, the workflow includes a check to ensure that the chart version is incremented when changes are made, except for the dev and bugfix branches, which helps maintain a consistent versioning scheme and ensures that changes are properly tracked. While the workflow includes commented-out steps for creating a Kind cluster and installing the Helm chart, these could be useful for performing additional testing and validation of the chart, such as ensuring that the application can be deployed and run correctly.

Files Changed:

• .github/workflows/test-helm-chart.yml: This file contains the GitHub Actions workflow responsible for linting the DefectDojo Helm chart. The key changes include:
  • Updating the version of the helm/chart-testing-action from v2.6.1 to v2.7.0.
  • Maintaining the Helm chart linting process, which can help catch potential security issues.
  • Implementing a check to ensure that the chart version is incremented when changes are made, except for the dev and bugfix branches.
  • Including commented-out steps for creating a Kind cluster and installing the Helm chart, which could be useful for additional testing and validation.

Code Analysis

We ran 9 analyzers against 1 file and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[mtesauro]

Approved