Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

0 CVE
selenium-grid
Hardened selenium-grid image, built from source on Wolfi.
chart v0.0.3 · app v4.51.0
DatastorestandardUnknown
0 CVE
sigstore-stack
Self-hosted Sigstore: the Fulcio certificate authority, the Rekor v2 transparency log and the Timestamp Authority in one install, for keyless signing…
chart v0.0.15 · app v1.0.0
StacksstandardUnknown
D 6
skywalking
Apache SkyWalking APM — observability platform for distributed systems (distributed tracing, metrics, logs and service topology) via the OAP backend.…
chart v · app v11.0.0
ObservabilitystandardApache-2.0
D 6
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
chart v · app v10.0.0
SearchlowApache-2.0
D 6
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
chart v · app v1.56.2
IdentitystandardApache-2.0
D 16
spire
SPIRE, the SPIFFE runtime that attests nodes and workloads and issues them short-lived X.509 and JWT identities (spire-server and spire-agent in one…
chart v · app v1.15.5
IdentitystandardApache-2.0
A+
squid
Caching forward proxy for HTTP and HTTPS (CONNECT). Pods reach the outside through it, and it caches repeat fetches in memory. The default config…
chart v · app v7.6
CachestandardGPL-2.0+
D 20
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
chart v · app v0.30.2
Security & supply chainstandardApache-2.0
D 11
step-issuer
step-issuer, smallstep's cert-manager external issuer. StepIssuer and StepClusterIssuer resources sign cert-manager CertificateRequests through a…
chart v · app v0.12.0
Security & supply chainstandardApache-2.0
D 10
storm
Apache Storm, a distributed real-time stream processing system; one image runs Nimbus, the supervisor, the UI and the log viewer.
chart v · app v3.1.0
MessagingstandardApache-2.0
0 CVE
streaming-stack
Hardened event-streaming stack: a KRaft Kafka cluster, the Karapace schema registry and REST proxy, and the AKHQ web console, wired together in one…
chart v0.0.15 · app v1.0.0
StacksstandardUnknown
D 3
strimzi-operator
Strimzi, the Kubernetes operator that runs and manages Apache Kafka clusters, topics and users. One image carries the cluster operator, topic…
chart v · app v1.2.0
MessagingstandardApache-2.0