Skip Kubescape score validation for Helm library charts in CI verify workflow

[Copilot]

The Run linter and kubescape job failed when validating bitnami/common because Kubescape was invoked on a Helm library chart, which has no deployable resources to scan. This change prevents false CI failures by bypassing score comparison for library charts.

• Workflow logic update

  • In .github/workflows/ci-verify.yml, the Validate score step now checks Chart.yaml before running Kubescape.
  • If type: library, the step skips score validation for that chart instead of running kubescape scan framework.

• Behavioral impact

  • Application charts continue to run the existing PR-vs-main Kubescape score comparison unchanged.
  • Library charts (for example bitnami/common) no longer fail the job with no resources found to scan.

if grep -q '^type:[[:space:]]*library$' "charts-pr/bitnami/${CHART}/Chart.yaml"; then
  echo "Skipping Kubescape score validation for library chart bitnami/${CHART}"
elif [ -d "charts-main/bitnami/${CHART}" ]; then
  # existing kubescape score comparison logic
fi