Charts

280 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 280 charts.

A+
tigerbeetle
Distributed financial-grade accounting database for high-throughput double-entry bookkeeping. Ships a single self-contained static Zig binary; speaks…
chart v · app v0.17.9
DatabasestandardApache-2.0
A+
tika
Apache Tika server, the REST API for extracting text and metadata from PDF, Office, image, archive and 1000+ other formats. The Apache 4.x release on…
chart v · app v4.1.0
SearchstandardApache-2.0
A+
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for…
chart v · app v2.30.2
Time seriesstandardApache-2.0
A 1
timestamp-authority
The Sigstore Timestamp Authority, an RFC 3161 timestamping server that countersigns artifact hashes, with file, KMS and Tink signers. Built from…
chart v · app v2.1.3
Security & supply chainstandardApache-2.0
A+
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
chart v · app v11.0.26
GatewaycriticalApache-2.0
0 CVE
tomee
Apache TomEE, Tomcat with the Jakarta EE Web Profile stack (OpenEJB, OpenWebBeans, MyFaces, CXF) for running Jakarta EE applications.
chart v0.0.2 · app v10.2.0
GatewaystandardApache-2.0
0 CVE
tracing-stack
Hardened, operator-free distributed tracing stack: Tempo (trace store/query) + Grafana (Tempo datasource + trace exploration) + an OpenTelemetry…
chart v0.0.15 · app v1.0.0
StacksstandardUnknown
A 1
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
chart v · app v3.7.14
GatewaystandardMIT
A+
trino
Trino, the distributed SQL query engine for federated analytics. Assembled from upstream's release assets on Wolfi openjdk-25 with the jmx, memory,…
chart v · app v483
Databases & enginesstandardApache-2.0
A 1
trivy-operator
Trivy Operator, the Kubernetes operator that continuously scans workloads, configurations, RBAC and the cluster with Trivy and stores the results as…
chart v · app v0.34.0
Security & supply chainstandardApache-2.0
A 1
trust-manager
trust-manager, cert-manager's trust bundle distributor. A Bundle resource gathers CA certificates from ConfigMaps, Secrets and inline PEM and writes…
chart v · app v0.25.0
Security & supply chainstandardApache-2.0
C 2
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime…
chart v · app v5.14.0
GatewaystandardMPL-2.0