Can't pull chart, 403 permission denied

[LCaparelli]

Preflight Checklist

• [X] I have searched the issue tracker for an issue that matches the one I want to file, without success.
• [X] I am not looking for support or already pursued the available support channels without success.
• [X] I agree to follow the Code of Conduct.

Vault Secrets Webhook Version

1.21.1

Installation Type

None

Bank-Vaults Version

No response

Kubernetes Version

1.29

Kubernetes Distribution/Provisioner

EKS

Expected Behavior

Pulling this chart as a dependency succeeds.

Actual Behavior

Fails with 403.

Steps To Reproduce

❯ helm upgrade --install --wait vault-secrets-webhook oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook --namespace vault-infra

Release "vault-secrets-webhook" does not exist. Installing it now.
Error: GET "https://ghcr.io/v2/bank-vaults/helm-charts/vault-secrets-webhook/tags/list": GET "https://ghcr.io/token?scope=repository%3Abank-vaults%2Fhelm-charts%2Fvault-secrets-webhook%3Apull&service=ghcr.io": unexpected status code 403: denied: denied

❯ helm pull oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook/vault-secrets-webhook --version 1.21.1
Error: failed to authorize: failed to fetch oauth token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Abank-vaults%2Fhelm-charts%2Fvault-secrets-webhook%2Fvault-secrets-webhook%3Apull&service=ghcr.io: 403 Forbidden

❯ tail Chart.yaml

# Version number of the application being deployed. This version number should be
# incremented each time you make changes to the application.
appVersion: "1.0"

dependencies:
  - name: vault-secrets-webhook
    version: 1.21.1
    repository: oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook

❯ helm dependency update
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "eks" chart repository
...Successfully got an update from the "localstack-repo" chart repository
...Successfully got an update from the "strimzi" chart repository
...Successfully got an update from the "hashicorp" chart repository
...Successfully got an update from the "jetstack" chart repository
...Successfully got an update from the "crossplane-stable" chart repository
...Successfully got an update from the "project-calico" chart repository
...Successfully got an update from the "bitnami" chart repository
Update Complete. ⎈Happy Helming!⎈
Saving 1 charts
Downloading vault-secrets-webhook from repo oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook
Save error occurred:  could not download oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook/vault-secrets-webhook: failed to authorize: failed to fetch oauth token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Abank-vaults%2Fhelm-charts%2Fvault-secrets-webhook%2Fvault-secrets-webhook%3Apull&service=ghcr.io: 403 Forbidden
Error: could not download oci://ghcr.io/bank-vaults/helm-charts/vault-secrets-webhook/vault-secrets-webhook: failed to authorize: failed to fetch oauth token: unexpected status from GET request to https://ghcr.io/token?scope=repository%3Abank-vaults%2Fhelm-charts%2Fvault-secrets-webhook%2Fvault-secrets-webhook%3Apull&service=ghcr.io: 403 Forbidden

Configuration

No response

Logs

No response

Additional Information

No response