Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

A+
tomee
Apache TomEE, Tomcat with the Jakarta EE Web Profile stack (OpenEJB, OpenWebBeans, MyFaces, CXF) for running Jakarta EE applications.
chart v · app v10.2.0
GatewaystandardApache-2.0
0 CVE
tracing-stack
Hardened, operator-free distributed tracing stack: Tempo (trace store/query) + Grafana (Tempo datasource + trace exploration) + an OpenTelemetry…
chart v0.0.23 · app v1.0.0
StacksstandardUnknown
D 5
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
chart v · app v3.7.16
GatewaystandardMIT
D 19
trino
Trino, the distributed SQL query engine for federated analytics. Assembled from upstream's release assets on Wolfi openjdk-25 with the jmx, memory,…
chart v · app v483
Databases & enginesstandardApache-2.0
D 4
trivy-operator
Trivy Operator, the Kubernetes operator that continuously scans workloads, configurations, RBAC and the cluster with Trivy and stores the results as…
chart v · app v0.35.0
Security & supply chainstandardApache-2.0
A 3
trust-manager
trust-manager, cert-manager's trust bundle distributor. A Bundle resource gathers CA certificates from ConfigMaps, Secrets and inline PEM and writes…
chart v · app v0.25.0
Security & supply chainstandardApache-2.0
D 10
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime…
chart v · app v5.14.0
GatewaystandardMPL-2.0
A+
typesense
Fast, typo-tolerant search engine with an instant-search REST API and a self-contained embedded store (no external database), tuned for low-latency…
chart v · app v30.2
SearchstandardGPL-3.0
A+
unbound
Unbound, the validating, recursive, caching DNS resolver from NLnet Labs. Built from source with libevent, expat and dnscrypt; a nonroot config on…
chart v · app v1.26.2
CoordinationstandardBSD-3-Clause
D 12
unleash
Unleash, the feature-flag and gradual-rollout server (flags, strategies, segments, environments, admin UI, client and frontend APIs) on PostgreSQL.…
chart v · app v8.2.1
Apps & productivitystandardAGPL-3.0+
D 17
uptime-kuma
Uptime Kuma, the self-hosted uptime monitor and status-page server (HTTP, TCP, ping, DNS, database and more). The tagged server with pinned npm…
chart v · app v2.5.6
ObservabilitystandardMIT
A+
Valkey
BSD-licensed in-memory key-value store, the truly-open community fork of Redis 7.2. QuenchWorks' default cache and the recommended Redis drop-in…
chart v · app v9.1.2
CachecriticalBSD-3-Clause