From 5d05af16825b94ad3da13a4ca1357055e935e0aa Mon Sep 17 00:00:00 2001
From: Markus Pesch <markus.pesch@cryptic.systems>
Date: Sun, 18 Oct 2026 17:19:10 +0200
Subject: [PATCH] fix(ci): upload prov file to gitea

---
 .gitea/workflows/release.yaml | 24 +++++++++---------------
 1 file changed, 9 insertions(+), 15 deletions(-)

diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml
index 855ea8a..ccd4dc0 100644
--- a/.gitea/workflows/release.yaml
+++ b/.gitea/workflows/release.yaml
@@ -117,21 +117,15 @@ jobs:
             --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz" \
               https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/charts
 
-          # NOTE:
-          # Gitea does currently not support uploading Helm chart provenance files, so we skip this step for now. Once
-          # Gitea supports this, we can simply uncomment the following lines to upload the provenance file as well.
-          #
-          #   https://github.com/helm/helm/issues/31866
-          #
-          # if [ -f "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" ]; then
-          #   curl \
-          #     --fail \
-          #     --show-error \
-          #     --request POST \
-          #     --user "${CHARTMUSEUM_USERNAME}:${CHARTMUSEUM_PASSWORD}" \
-          #     --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" \
-          #       https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/prov
-          # fi
+          if [ -f "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" ]; then
+            curl \
+              --fail \
+              --show-error \
+              --request POST \
+              --user "${CHARTMUSEUM_USERNAME}:${CHARTMUSEUM_PASSWORD}" \
+              --upload-file "${REPOSITORY_NAME}-${PACKAGE_VERSION}.tgz.prov" \
+                https://${GITEA_SERVER_HOSTNAME}/api/packages/${REPOSITORY_OWNER}/helm/api/prov
+          fi
 
       - name: Upload Chart to Chartmuseum (Helm)
         env: