Please address the comments from this code review:

## Overall Comments
- The `publish-helm-charts.sh` script now hard-requires an `operator_chart_dir` argument; if you expect any reuse of this script outside the updated `push_helm_charts` path, consider making the operator chart parameter optional (with a clear conditional branch) to avoid surprising failures in other callers.
- In `push_helm_charts`, you now create an additional `mktemp` directory for the operator chart but never clean it up; adding a simple `trap 'rm -rf ...' EXIT` to remove all temporary directories would keep the script from leaking temp data across repeated runs.

## Individual Comments

### Comment 1
<location path="operator/Makefile" line_range="326-328" />
<code_context>
 chart: kubebuilder manifests ## Generate a helm chart with all necessary resources.
 # The dependency above makes sure protos are up to date, so we can skip this time-consuming process below
 # by specifying the SKIP env var. Otherwise each target that kubebuilder invokes (and there is a bunch) would regen protos.
+	if [ "$(ROX_IMAGE_FLAVOR)" = opensource ]; then sed -i'.bak' -e 's,^projectName: rhacs-operator,projectName: stackrox-operator,' PROJECT; fi
 	ROX_OPERATOR_SKIP_PROTO_GENERATED_SRCS=true $(KUBEBUILDER) edit --plugins=helm/v2-alpha --force
+	if [ "$(ROX_IMAGE_FLAVOR)" = opensource ]; then mv PROJECT.bak PROJECT; fi
 	sed -i'.bak' -e 's,0.1.0,$(VERSION),g' dist/chart/Chart.yaml
 	rm -f dist/chart/Chart.yaml.bak
</code_context>
<issue_to_address>
**issue:** Guard against leaving PROJECT mutated if the kubebuilder step fails mid-target.

Because `PROJECT` is edited in place for `ROX_IMAGE_FLAVOR=opensource`, a failure in `$(KUBEBUILDER) edit ...` will skip the restore step and leave `PROJECT` in the temporary state. To avoid leaving the repo dirty, consider running kubebuilder against a copy of `PROJECT` or adding a trap/cleanup so the original is always restored on failure.
</issue_to_address>

Please address the comments from this code review:

## Overall Comments
- The updated `push_helm_charts`/`publish-helm-charts.sh` signatures now hard-require operator chart inputs; if these scripts are reused in any other context (e.g., manual runs, older branches, or ad‑hoc tooling), consider making the operator chart arguments optional with sensible fallbacks to preserve backward compatibility.
- In `.github/workflows/build.yaml`, the operator chart tar step uses `tar -cvzf` which can produce very verbose logs; unless you rely on that output, consider dropping the `-v` flag to keep CI logs smaller and easier to scan.

## Individual Comments

### Comment 1
<location path="operator/Makefile" line_range="326" />
<code_context>
 chart: kubebuilder manifests ## Generate a helm chart with all necessary resources.
 # The dependency above makes sure protos are up to date, so we can skip this time-consuming process below
 # by specifying the SKIP env var. Otherwise each target that kubebuilder invokes (and there is a bunch) would regen protos.
+	if [ "$(ROX_IMAGE_FLAVOR)" = opensource ]; then sed -i'.bak' -e 's,^projectName: rhacs-operator,projectName: stackrox-operator,' PROJECT; fi
 	ROX_OPERATOR_SKIP_PROTO_GENERATED_SRCS=true $(KUBEBUILDER) edit --plugins=helm/v2-alpha --force
+	if [ "$(ROX_IMAGE_FLAVOR)" = opensource ]; then mv PROJECT.bak PROJECT; fi
 	sed -i'.bak' -e 's,0.1.0,$(VERSION),g' dist/chart/Chart.yaml
 	rm -f dist/chart/Chart.yaml.bak
</code_context>
<issue_to_address>
**suggestion (bug_risk):** The conditional PROJECT mutation is somewhat brittle on the exact `projectName` format.

This depends on `PROJECT` containing exactly `projectName: rhacs-operator` with no indentation, so any upstream formatting change (whitespace, key order, etc.) would cause the `sed` to no-op and leave the `rhacs-operator` name in the opensource chart. Please either make the match more tolerant (e.g., allow leading whitespace) or move the flavor-specific `projectName` into a templated/derived file instead of editing the kubebuilder-generated `PROJECT` in place.

```suggestion
	if [ "$(ROX_IMAGE_FLAVOR)" = opensource ]; then sed -i'.bak' -e 's,^[[:space:]]*projectName:[[:space:]]*rhacs-operator,projectName: stackrox-operator,' PROJECT; fi
```
</issue_to_address>