separate helm workflow

.github/workflows/pull_request.yaml

@@ -49,19 +49,6 @@ jobs:
         ref: ${{github.event.pull_request.head.sha}}
         fetch-depth: 0
 
-    # Setting up helm binary
-    - name: Set up Helm
-      uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-      with:
-        version: v3.20.2
-
-    - name: Helm chart unit tests
-      uses: d3adb5/helm-unittest-action@850bc76597579183998069830d5fa8c3ef0ea34a # v2
-      with:
-        charts: deployments/kubernetes/chart/reloader
-        helm-version: v3.20.2
-        github-token: ${{ secrets.GITHUB_TOKEN }}
-
     - name: Set up Go
       uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
       with:
@@ -88,11 +75,6 @@ jobs:
     - name: Run golangci-lint
       run: make lint
 
-    - name: Helm Lint
-      run: |
-        cd deployments/kubernetes/chart/reloader
-        helm lint
-
     - name: Install kubectl
       run: |
         curl -LO "https://storage.googleapis.com/kubernetes-release/release/v${KUBERNETES_VERSION}/bin/linux/amd64/kubectl"

.github/workflows/pull_request_helm.yaml

@@ -0,0 +1,42 @@
+name: Pull Request Workflow for Helm Chart changes
+
+on:
+  pull_request:
+    branches:
+      - master
+      - 'v**'
+    paths:
+      - 'deployments/kubernetes/chart/reloader/**'
+
+# Default to no GITHUB_TOKEN permissions; each job opts into the minimum it needs.
+permissions: {}
+
+jobs:
+  helm:
+    permissions:
+      contents: read
+    runs-on: ubuntu-latest
+    name: Helm Lint & Unit Tests
+    steps:
+    - name: Check out code
+      uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      with:
+        ref: ${{ github.event.pull_request.head.sha }}
+
+    # Setting up helm binary
+    - name: Set up Helm
+      uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+      with:
+        version: v3.20.2
+
+    - name: Helm chart unit tests
+      uses: d3adb5/helm-unittest-action@850bc76597579183998069830d5fa8c3ef0ea34a # v2
+      with:
+        charts: deployments/kubernetes/chart/reloader
+        helm-version: v3.20.2
+        github-token: ${{ secrets.GITHUB_TOKEN }}
+
+    - name: Helm Lint
+      run: |
+        cd deployments/kubernetes/chart/reloader
+        helm lint