From aab1546cbe8f7fbc7e8b2c0939f2f4e57942a7a2 Mon Sep 17 00:00:00 2001
From: DriveWealth CI <actions@drivewealth.com>
Date: Tue, 18 Aug 2026 17:12:20 -0500
Subject: [PATCH 1/2] fix(do-7299): replace mamezou-tech/setup-helmfile with
 arch-aware binary download

mamezou-tech/setup-helmfile hardcodes linux_amd64 in its JS source and has no
arm64 support. Replace with a shell step that detects arch via uname -m and
downloads the correct helmfile binary from the official helmfile GitHub Releases.

Helm is already installed by azure/setup-helm in the dw-github-workflows wrapper
(argocd-deploy/action.yml) before this action is invoked, so helm-version input
is intentionally unused here.
---
 action.yml | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/action.yml b/action.yml
index 865ed9d..46a9404 100644
--- a/action.yml
+++ b/action.yml
@@ -136,12 +136,21 @@ runs:
         force: true
 
     - name: Setup helmfile
-      uses: mamezou-tech/setup-helmfile@v2.2.0
       if: ${{ inputs.operation == 'deploy' }}
-      with:
-        helmfile-version: "${{ inputs.helmfile-version }}"
-        helm-version: "${{ inputs.helm-version }}"
-        install-kubectl: false
+      shell: bash
+      run: |
+        HELMFILE_VERSION="${{ inputs.helmfile-version }}"
+        HELMFILE_VERSION="${HELMFILE_VERSION#v}"
+        ARCH=$(uname -m)
+        case "$ARCH" in
+          x86_64)  ARCH="amd64" ;;
+          aarch64) ARCH="arm64" ;;
+        esac
+        TMP=$(mktemp -d)
+        curl -sSL "https://github.com/helmfile/helmfile/releases/download/v${HELMFILE_VERSION}/helmfile_${HELMFILE_VERSION}_linux_${ARCH}.tar.gz" \
+          | tar -xz -C "$TMP"
+        sudo mv "$TMP/helmfile" /usr/local/bin/helmfile
+        sudo chmod +x /usr/local/bin/helmfile
 
     - name: Setup node
       uses: actions/setup-node@v6

From 85813875ac0569ddc7e736fe8c728f84e29b2294 Mon Sep 17 00:00:00 2001
From: DriveWealth CI <actions@drivewealth.com>
Date: Wed, 19 Aug 2026 09:42:42 -0500
Subject: [PATCH 2/2] chore: add CODEOWNERS to comply with DriveWealth org
 requirements

---
 .github/CODEOWNERS | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 .github/CODEOWNERS

diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
new file mode 100644
index 0000000..99240f2
--- /dev/null
+++ b/.github/CODEOWNERS
@@ -0,0 +1 @@
+* @DriveWealth/devops