Charts

281 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 281 charts.

0 CVE
logging-stack
Hardened, operator-free logging stack: Loki + Grafana + Vector, wired together for cluster log aggregation and browsing.
chart v0.0.18 · app v0.58.0
StacksstandardUnknown
A 2
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
chart v · app v3.7.8
ObservabilitystandardAGPL-3.0
A 1
mailpit
Email and SMTP testing tool with a web UI for capturing and inspecting messages during development.
chart v · app v1.31.4
Apps & productivitystandardMIT
A+
MariaDB
Community-developed relational database and drop-in MySQL successor, GPL-licensed and fully open. Default MySQL-compatible engine for the catalog.
chart v · app v12.3.3
RelationalcriticalGPL-2.0
A 1
mariadb-operator
MariaDB Operator, which runs MariaDB and Galera clusters on Kubernetes from CRDs: provisioning, replication and multi-primary HA, backups, users and…
chart v · app v26.10.1
Databases & enginesstandardMIT
A+
mastodon
Mastodon, the federated social network server (web and sidekiq). Built from the release tag on a hardened Wolfi ruby-4.0 runtime with every gem…
chart v · app v4.7.3
Apps & productivitystandardAGPL-3.0
A+
matomo
Matomo, the self-hosted web analytics platform and a privacy-respecting alternative to Google Analytics: you keep the raw data. Built from the…
chart v · app v5.12.0
Apps & productivitystandardGPL-3.0+
A 2
mattermost
Open-source, self-hosted team messaging and collaboration platform (a Slack alternative) with channels, direct messages, file sharing, and…
chart v · app v11.11.1
MessagingstandardAGPL-3.0
A 1
mediamtx
Real-time media server and proxy for RTSP, RTMP, HLS, WebRTC, and SRT. Single static Go binary on a hardened nonroot Wolfi base; config via a mounted…
chart v · app v1.21.1
Media & streamingstandardMIT
A+
mediawiki
MediaWiki, the wiki engine behind Wikipedia. The official release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only rootfs), with…
chart v · app v1.46.2
Apps & productivitystandardGPL-2.0+
A+
Meilisearch
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
chart v · app v1.53.2
SearchstandardMIT
A+
Memcached
Simple, high-performance distributed in-memory cache for storing small objects and database query results to reduce backend load.
chart v · app v1.6.45
CachestandardBSD-3-Clause