Charts

280 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 280 charts.

0 CVE
rook-ceph
Hardened rook-ceph image, built from source on Wolfi.
chart v0.0.4 · app v1.21.0
DatastorestandardUnknown
A 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
chart v · app v10.3.7
RelationalstandardMIT
A+
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative.…
chart v · app v1.0.0_beta12
Object storagelowApache-2.0
A+
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
chart v · app v2026.3.3
Wide-columnlowAGPL-3.0
A 1
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
chart v · app v0.38.4
Security & supply chainstandardApache-2.0
0 CVE
search-stack
Hardened search with a UI in one install: OpenSearch (search and analytics engine, HA cluster or one node) + OpenSearch Dashboards (Discover,…
chart v0.0.2 · app v3.8.0
StacksstandardUnknown
A 1
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small…
chart v · app v4.48
Object storagestandardApache-2.0
0 CVE
secrets-stack
OpenBao behind Keycloak sign-in: OpenBao auto-unseals and configures itself on first start (KV v2, OIDC for people, JWT for workloads, a break-glass…
chart v0.0.10 · app v1.0.0
StacksstandardUnknown
0 CVE
sigstore-stack
Self-hosted Sigstore: the Fulcio certificate authority, the Rekor v2 transparency log and the Timestamp Authority in one install, for keyless signing…
chart v0.0.4 · app v1.0.0
StacksstandardUnknown
A+
skywalking
Apache SkyWalking APM — observability platform for distributed systems (distributed tracing, metrics, logs and service topology) via the OAP backend.…
chart v · app v11.0.0
ObservabilitystandardApache-2.0
D 1
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
chart v · app v10.0.0
SearchlowApache-2.0
A 1
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
chart v · app v1.56.2
IdentitystandardApache-2.0