feat(helm-chart)!: Update Helm release kube-prometheus-stack to 67.11.0 - autoclosed #2538

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	name: Kubesec

	on:
	push:
	branches: [ main ]
	pull_request:
	# The branches below must be a subset of the branches above
	branches: [ main ]
	schedule:
	- cron: '38 20 * * 3'

	jobs:
	lint:
	name: Kubesec
	runs-on: ubuntu-latest
	permissions:
	actions: read
	contents: read
	security-events: write
	steps:
	- name: Checkout code
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

	- name: Install kustomize
	uses: imranismail/setup-kustomize@2ba527d4d055ab63514ba50a99456fc35684947f # v2

	- name: Build full config from kustomizations
	run: kustomize build ./cluster -o fullcluster.yaml

	- name: Run kubesec scanner
	uses: controlplaneio/kubesec-action@43d0ddff5ffee89a6bb9f29b64cd865411137b14 # v0.0.2
	with:
	input: ./fullcluster.yaml
	format: template
	template: "/templates/sarif.tpl"
	output: kubesec-results.sarif
	exit-code: "0"

	- name: 'Upload Artifact'
	uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4
	with:
	name: KubeSec-results
	path: kubesec-results.sarif
	retention-days: 5

	- name: Upload Kubesec scan results to GitHub Security tab
	uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3
	with:
	sarif_file: kubesec-results.sarif

Provide feedback