Charts

28 charts

Stacks charts

Hardened Helm charts in the stacks category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
sigstore-stack
Self-hosted Sigstore: the Fulcio certificate authority, the Rekor v2 transparency log and the Timestamp Authority in one install, for keyless signing…
chart v0.0.15 · app v1.0.0
StacksstandardUnknown
0 CVE
streaming-stack
Hardened event-streaming stack: a KRaft Kafka cluster, the Karapace schema registry and REST proxy, and the AKHQ web console, wired together in one…
chart v0.0.15 · app v1.0.0
StacksstandardUnknown
0 CVE
supply-chain-stack
Admission-time supply-chain control: Kyverno admits only QuenchWorks images signed by the QuenchWorks build workflows (cosign keyless, checked…
chart v0.0.14 · app v1.0.0
StacksstandardUnknown
0 CVE
tracing-stack
Hardened, operator-free distributed tracing stack: Tempo (trace store/query) + Grafana (Tempo datasource + trace exploration) + an OpenTelemetry…
chart v0.0.23 · app v1.0.0
StacksstandardUnknown