CloudPirates Open Source Helm Charts contained a vulnerability in their GitHub Actions workflow (generate-schema.yaml) that exposed sensitive credentials including Personal Access Tokens and SSH signing keys to fork-controlled code. The issue was caused by unsafe checkout and credential handling practices in the CI/CD pipeline. This vulnerability could allow attackers with fork access to steal sensitive authentication credentials. The security flaw has been patched via commit fcf9302.