From 5f152e80e86f5e4a59219d12e4887fcf402dc0f4 Mon Sep 17 00:00:00 2001
From: Oren Fromberg <145494346+oren-openteams@users.noreply.github.com>
Date: Wed, 22 Jul 2026 15:59:53 -0400
Subject: [PATCH] fix(pack-release): make tag-paths optional for charts without
 first-party images

---
 .github/workflows/pack-release.yaml | 16 ++++++++++++----
 1 file changed, 12 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/pack-release.yaml b/.github/workflows/pack-release.yaml
index 7f90195..1a88cac 100644
--- a/.github/workflows/pack-release.yaml
+++ b/.github/workflows/pack-release.yaml
@@ -65,7 +65,11 @@ on:
           release's sha-<short-sha> tag, for example:
             operator.image.tag
             worker.image.tag
-        required: true
+          Optional. Charts that don't ship first-party images (e.g. charts
+          that only reference third-party base images) can omit this or
+          pass an empty string.
+        required: false
+        default: ""
         type: string
     secrets:
       NEBARI_HELM_REPO_TOKEN:
@@ -165,10 +169,14 @@ jobs:
 
           short_sha="${GITHUB_SHA::7}"
           mapfile -t paths < <(printf '%s\n' "$TAG_PATHS" | sed '/^[[:space:]]*$/d')
-          echo "Pinning ${#paths[@]} path(s) to sha-${short_sha}: ${paths[*]}"
 
-          python3 _dot-github/.github/scripts/pin_image_tags.py \
-            "${CHART_PATH}/values.yaml" "sha-${short_sha}" "${paths[@]}"
+          if [ "${#paths[@]}" -eq 0 ]; then
+            echo "No tag paths configured — skipping image tag pinning"
+          else
+            echo "Pinning ${#paths[@]} path(s) to sha-${short_sha}: ${paths[*]}"
+            python3 _dot-github/.github/scripts/pin_image_tags.py \
+              "${CHART_PATH}/values.yaml" "sha-${short_sha}" "${paths[@]}"
+          fi
 
       - name: Set up Helm
         if: steps.exists.outputs.exists == 'false'