Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

A+
rethinkdb
RethinkDB, the realtime document database with changefeeds that push query results to clients as data changes, plus a web admin UI. From Wolfi's…
chart v · app v2.4.4
Databases & enginesstandardApache-2.0
0 CVE
rook-ceph
Hardened rook-ceph image, built from source on Wolfi.
chart v0.0.9 · app v1.21.0
DatastorestandardUnknown
A 3
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
chart v · app v10.3.7
RelationalstandardMIT
0 CVE
runtime-security-stack
Hardened runtime security in one install: Falco (syscall rules with the modern eBPF probe, JSON alerts naming the container) + Tetragon (kernel-level…
chart v0.0.4 · app v1.0.0
StacksstandardUnknown
F 10
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative.…
chart v · app v1.0.1
Object storagelowApache-2.0
D 8
satosa
SATOSA, the IdentityPython proxy that translates between SAML2 and OpenID Connect or OAuth2, so services and identity providers that speak different…
chart v · app v8.6.0
IdentitystandardApache-2.0
F 2
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
chart v · app v2026.3.4
Wide-columnlowAGPL-3.0
A 3
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
chart v · app v0.38.4
Security & supply chainstandardApache-2.0
0 CVE
search-stack
Hardened search with a UI in one install: OpenSearch (search and analytics engine, HA cluster or one node) + OpenSearch Dashboards (Discover,…
chart v0.0.6 · app v3.8.0
StacksstandardUnknown
D 6
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small…
chart v · app v4.48
Object storagestandardApache-2.0
0 CVE
secrets-stack
OpenBao behind Keycloak sign-in: OpenBao auto-unseals and configures itself on first start (KV v2, OIDC for people, JWT for workloads, a break-glass…
chart v0.0.17 · app v1.0.0
StacksstandardUnknown
A 3
secrets-store-csi-driver
Secrets Store CSI Driver, mounting secrets from external stores (Vault, cloud KMS) into pods as volumes, built from source.
chart v · app v1.6.1
Security & supply chainstandardApache-2.0