From e609bb06e33ab50764959d34a406b069337275dc Mon Sep 17 00:00:00 2001
From: Asher <ash@coder.com>
Date: Wed, 4 Nov 2026 14:37:19 -0900
Subject: [PATCH] Render Helm template for kubeconform

---
 .github/workflows/build.yaml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index 3dcb0414d..b8854f8ce 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -92,10 +92,15 @@ jobs:
     if: needs.changes.outputs.helm == 'true'
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
+      - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          version: "v3.19.2"
       - uses: bmuschko/setup-kubeconform@e5d264ec1eafe2314e750c429a9da7639dd5a003 # v1.1.0
         with:
           kubeconform-version: "0.8.0"
-      - run: kubeconform ci/helm-chart
+      - run: helm template ci/helm-chart | kubeconform -strict -summary -
+        shell: bash # Setting shell:bash makes GitHub add `-o pipefail`.
 
   lint-ts:
     name: Lint TypeScript files