automated release for helm chart

[Rupam-It]

this CI changes make sure to release the helm chart whenever there is a helm chart , it will automatically make a release !

---

Summary by Gitar

• CI workflows for Helm chart automation:
  • Added helm-auto-release.yml to automatically release zxporter chart on changes, bumping patch version and pushing to Docker Hub OCI registry
  • Added helm-auto-release-netmon.yml to automatically release zxporter-netmon chart with same automation pattern
  • Added helm-chart-validation.yml to lint and template-render both charts on pull requests

_{This will update automatically on new commits.}

In general, to fix this class of problem you add a permissions block either at the root of the workflow (applies to all jobs unless overridden) or per job, and set only the minimal scopes needed (typically contents: read for simple CI jobs that just check out code).

For this specific workflow, both jobs only check out the code and run Helm commands; they don’t interact with issues, PRs, or perform any repository writes. The single best fix is therefore to add a root-level permissions section right under the name: (and before on:), setting contents: read. This will apply to both validate-zxporter and validate-netmon without altering existing behavior. No additional imports or methods are required, because this is a YAML configuration change only.

Concretely, in .github/workflows/helm-chart-validation.yml, insert:

permissions:
  contents: read

between line 1 (name: Helm Chart Validation) and line 3 (on:). No other changes are necessary.

In general, the fix is to explicitly set a restrictive permissions: block for the workflow or individual jobs so the GITHUB_TOKEN has only the minimal scopes required. For this Helm validation workflow, the jobs just need to read repository contents (to check out code and charts) and do not interact with issues, PRs, or perform any writes, so contents: read at the workflow root is sufficient.

The best fix without changing existing functionality is to add a single root-level permissions: block after the on: section. This will apply to both validate-zxporter and validate-netmon jobs since they do not define their own permissions:. No other logic, steps, or actions need to be modified. Concretely, in .github/workflows/helm-chart-validation.yml, add:

permissions:
  contents: read

between the on: block (ending at line 8) and the jobs: key (line 10). No additional imports or definitions are required because this is purely a YAML configuration change for GitHub Actions.