Charts

279 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 279 charts.

0 CVE
cert-manager
Hardened cert-manager image, built from source on Wolfi.
chart v0.0.11 · app v1.21.2
DatastorestandardUnknown
A 1
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more).
chart v0.0.5 · app v0.16.6
CI/CD & registrystandardApache-2.0
A 1
cilium-operator
The Cilium Operator, generic variant (cluster-pool IPAM, CRD registration, identity and endpoint garbage collection) for a Cilium install run with…
chart v0.0.3 · app v1.20.2
Coordination & meshstandardApache-2.0
A+
clamav
ClamAV antivirus engine built from the release tarball. clamd scans streams over TCP 3310 for apps that check uploads, freshclam keeps the signature…
chart v0.0.2 · app v1.5.4
Security & supply chainstandardGPL-2.0
A+
ClickHouse
Column-oriented OLAP database for real-time analytical queries over very large datasets, with high ingest rates and fast aggregations.
chart v0.0.25 · app v26.7.16.2
AnalyticalstandardApache-2.0
A+
cloudnative-pg
CloudNativePG, the Kubernetes operator for PostgreSQL high availability: streaming replicas, automated failover, and backups. Built from source…
chart v0.0.5 · app v1.30.1
Databases & enginesstandardApache-2.0
A 1
cluster-autoscaler
Kubernetes Cluster Autoscaler, the SIG Autoscaling controller that adds nodes when pods cannot be scheduled and removes underused ones. Every cloud…
chart v0.0.2 · app v1.36.1
CoordinationstandardApache-2.0
0 CVE
cnpg-stack
Operator-managed HA PostgreSQL in one install: the CloudNativePG operator + a replicated Cluster (streaming replication, automated failover, built-in…
chart v0.0.2 · app v1.30.1
StacksstandardUnknown
A+
CockroachDB
Distributed SQL database with PostgreSQL wire compatibility and automatic horizontal scaling and survivability. BUSL is source-available, not…
chart v0.0.11 · app v26.2.7
RelationallowBUSL-1.1
B 1
code-server
VS Code in the browser (Coder's code-server), a full IDE served over HTTP. Ships Coder's official prebuilt release (bundled Node 24 + compiled VS…
chart v0.0.18 · app v4.139.1
Developer tools / IDEstandardMIT
A 6
concourse
Concourse CI, built from the release tag with its web UI compiled and embedded in the one Go binary, the containerd, grpc and otel modules floated to…
chart v · app v8.3.1
CI/CD & registrystandardApache-2.0
D 4
connaisseur
Connaisseur, the Kubernetes admission controller that verifies container image signatures (Cosign/Sigstore, Notary v1 and v2) against trust roots…
chart v0.0.2 · app v3.13.0
Security & supply chainstandardApache-2.0