CloudPirates Open Source Helm Charts is a collection of Helm charts. Prior to commit fcf9302, a GitHub Actions workflow (generate-schema.yaml) exposes sensitive…

CloudPirates Open Source Helm Charts contained a vulnerability in their GitHub Actions workflow (generate-schema.yaml) that exposed sensitive credentials including Personal Access Token and SSH signing key to fork-controlled code. The vulnerability was caused by unsafe checkout and credential handling practices in the CI/CD pipeline. This security flaw allowed potential unauthorized access to sensitive authentication materials through malicious forks. The issue was addressed and patched via commit fcf9302. The vulnerability represents a supply chain security risk affecting the Helm Charts collection.