From e25dc3ce3f7d4b142e1fb3afcbacad1f561e2873 Mon Sep 17 00:00:00 2001
From: Techassi <git@techassi.dev>
Date: Mon, 30 Mar 2026 10:35:38 +0200
Subject: [PATCH 1/2] feat(publish-helm-chart): Add publish and sign toggle

---
 publish-helm-chart/action.yaml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/publish-helm-chart/action.yaml b/publish-helm-chart/action.yaml
index 9db6f83..150ba94 100644
--- a/publish-helm-chart/action.yaml
+++ b/publish-helm-chart/action.yaml
@@ -36,6 +36,9 @@ inputs:
       SUFFIX may be 's' for seconds (the default), 'm' for minutes, 'h' for hours or 'd' for days.
       See `sleep --help` for the full details.
     default: "30s"
+  publish-and-sign:
+    description: Whether to publish and sign the packaged Helm Chart. Can be "true" or "false"
+    default: "true"
 runs:
   using: composite
   steps:
@@ -51,6 +54,7 @@ runs:
       run: "$GITHUB_ACTION_PATH/../.scripts/actions/install_helm.sh"
 
     - name: Log into Container Registry (${{ inputs.chart-registry-uri }}) using Helm
+      if: inputs.publish-and-sign == 'true'
       env:
         CHART_REGISTRY_USERNAME: ${{ inputs.chart-registry-username }}
         CHART_REGISTRY_PASSWORD: ${{ inputs.chart-registry-password }}
@@ -64,6 +68,7 @@ runs:
         helm registry login --username "$CHART_REGISTRY_USERNAME" --password "$CHART_REGISTRY_PASSWORD" "$CHART_REGISTRY_URI"
 
     - name: Log into Container Registry (${{ inputs.chart-registry-uri }}) using Docker
+      if: inputs.publish-and-sign == 'true'
       uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
       with:
         registry: ${{ inputs.chart-registry-uri }}
@@ -97,6 +102,7 @@ runs:
           "$CHART_DIRECTORY"
 
     - name: Publish Helm Chart
+      if: inputs.publish-and-sign == 'true'
       env:
         CHART_REGISTRY_URI: ${{ inputs.chart-registry-uri }}
         CHART_REPOSITORY: ${{ inputs.chart-repository }}
@@ -128,6 +134,7 @@ runs:
         echo "CHART_DIGEST=$CHART_DIGEST" | tee -a "$GITHUB_ENV"
 
     - name: Sign Helm Chart
+      if: inputs.publish-and-sign == 'true'
       env:
         RETRY_TIMEOUT: ${{ inputs.cosign-retry-timeout }}
         RETRY_COUNT: ${{ inputs.cosign-retries }}

From 8e97362d08df0975cb832d9932903058f2319441 Mon Sep 17 00:00:00 2001
From: Techassi <git@techassi.dev>
Date: Mon, 30 Mar 2026 10:36:17 +0200
Subject: [PATCH 2/2] docs(publish-helm-chart): Add publish and sign input

---
 publish-helm-chart/README.md | 21 +++++++++++----------
 1 file changed, 11 insertions(+), 10 deletions(-)

diff --git a/publish-helm-chart/README.md b/publish-helm-chart/README.md
index 65e71f7..ed0e219 100644
--- a/publish-helm-chart/README.md
+++ b/publish-helm-chart/README.md
@@ -12,16 +12,17 @@ It needs the `id-token: write` permission to be able to sign the Helm chart with
 
 ### Inputs
 
-| Input                     | Required | Description                                                     |
-| ------------------------- | -------- | --------------------------------------------------------------- |
-| `chart-registry-uri`      | Yes      | The URI of the Helm Chart registry                              |
-| `chart-registry-username` | Yes      | The username used to login to the Helm Chart registry           |
-| `chart-registry-password` | Yes      | The password used to login to the Helm Chart registry           |
-| `chart-repository`        | Yes      | Path to the Helm chart, for example `sdp-charts/kafka-operator` |
-| `chart-directory`         | Yes      | The directory where the Chart.yaml file is located              |
-| `chart-version`           | Yes      | The Helm Chart version                                          |
-| `app-version`             | Yes      | The app version to set in the Helm Chart                        |
-| `helm-version`            | No       | The version of helm                                             |
+| Input                     | Required | Description                                                       |
+| ------------------------- | -------- | ----------------------------------------------------------------- |
+| `chart-registry-uri`      | Yes      | The URI of the Helm Chart registry                                |
+| `chart-registry-username` | Yes      | The username used to login to the Helm Chart registry             |
+| `chart-registry-password` | Yes      | The password used to login to the Helm Chart registry             |
+| `chart-repository`        | Yes      | Path to the Helm chart, for example `sdp-charts/kafka-operator`   |
+| `chart-directory`         | Yes      | The directory where the Chart.yaml file is located                |
+| `chart-version`           | Yes      | The Helm Chart version                                            |
+| `app-version`             | Yes      | The app version to set in the Helm Chart                          |
+| `helm-version`            | No       | The version of helm                                               |
+| `publish-and-sign`        | No       | Whether to publish and sign the Helm Chart. `"true"` or `"false"` |
 
 ### Outputs