ci: fix tag update

Author: MartinFillon

.github/workflows/package.yml

@@ -23,6 +23,9 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v5
+        with:
+          token: ${{ secrets.TOKEN }}
+
       - name: Log in to the Container registry
         uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
         with:
@@ -42,17 +45,20 @@ jobs:
           push: true
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-      - name: Update tag in values.yaml
+      - name: install yq and setup git
         run: |
           pip install yq
-          yq e -i '.image.tag = "${{ steps.push.outputs.digest }}"' values.yaml
 
           git config --global user.name "github-actions[bot]"
           git config --global user.email "username@users.noreply.github.com"
+      - name: Update tag in values.yaml
+        run: |
+
+          python -m yq -Y --indentless --in-place '.image.tag = "${{ steps.push.outputs.digest }}"' values.yml
 
-          git add values.yaml
+          git add values.yml
           git commit -m "Update image tag to ${{ steps.push.outputs.digest }}"
-          git push
+          git push origin main
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v3

values.yml

@@ -1,9 +1,9 @@
 replicaCount: 1
 name: nanoforge-docs
 image:
-  repository: "ghcr.io/nanoforge-dev/docs"
-  tag: "main"
-imagePullSecret: "nanoforge-docker-token"
+  repository: ghcr.io/nanoforge-dev/docs
+  tag: sha256:7c45e4bcc7ba3913c12aca1d0c4556b3c9a4a001460a93795d109f5fbadfda04
+imagePullSecret: nanoforge-docker-token
 routes:
   - port: 80
-    match: "Host(`docs.nanoforge.eu`)"
+    match: Host(`docs.nanoforge.eu`)