secureCodeBox
Add a artifactHub metadata file to all ⛑ HelmCharts to verify the ownership
Is your feature request related to a problem? Please describe.
It is possible to add a metadata file to all helmChart repositories which are published at artifactHub.io The documentation can be found here: https://artifacthub.io/docs/topics/annotations/helm/
Artifact Hub is able to process chart repositories as defined by the Helm project.
Most of the metadata Artifact Hub needs is extracted from the Chart.yaml file and other files in the chart package, like the README or LICENSE files. However, there is some extra Artifact Hub specific metadata that you can set using some special annotations in the Chart.yaml file. For more information, please see the Artifact Hub Helm annotations documentation at: https://artifacthub.io/docs/topics/annotations/helm/
There is an extra metadata file that you can add at the repository URL’s path named artifacthub-repo.yml, which can be used to setup features like Verified Publisher or Ownership claim:
- https://artifacthub.io/docs/topics/repositories/#verified-publisher
- https://artifacthub.io/docs/topics/repositories/#ownership-claim
Describe the solution you'd like
It would be great if we a artifacthub-repo.yml to all secureCodeBox HelmCharts (https://charts.secureCodeBox.io) and add a Verified Publisher and Ownership claim.
Since we are using the chartmuseum project as backend for all secureCodeBox HelmCharts this is related to https://github.com/helm/chartmuseum/issues/419
We should do this after we migrated from own chartmuseum to image-registry (e.g. GH) https://github.com/secureCodeBox/internal/issues/145.
