Charts

280 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 280 charts.

A 1
forgejo
Self-hosted lightweight Git forge (a community Gitea fork) with issues, PRs, CI, and packages. From source with the web UI embedded (no Node at…
chart v · app v15.0.9
GitstandardGPL-3.0+
A 1
fulcio
Fulcio, the Sigstore certificate authority: it issues short-lived code-signing certificates bound to OIDC identities, for keyless signing with…
chart v · app v1.8.8
Security & supply chainstandardApache-2.0
A+
Garage
Lightweight, S3-compatible object store for small, self-hosted, geo-distributed deployments that stays available across node failures. Licensed AGPL;…
chart v · app v2.3.0
Object storagestandardAGPL-3.0
0 CVE
gateway-api-crds
Hardened gateway-api-crds image, built from source on Wolfi.
chart v0.0.1 · app v1.6.1
DatastorestandardUnknown
D 4
ghost
Open-source Node.js publishing platform for blogs, newsletters, and membership sites. Packaged from Ghost's official npm distribution on a hardened…
chart v · app v6.67.0
Apps & productivitystandardMIT
A 1
Gitea
Lightweight self-hosted Git service with repositories, issues, pull requests, and built-in CI/CD (Actions). A low-footprint GitHub alternative.
chart v · app v1.27.3
GitstandardMIT
A 1
gitlab-runner
GitLab Runner, the agent that runs GitLab CI jobs, here for the Kubernetes executor. Built from source (static Go, golang.org/x and otel floated)…
chart v · app v19.4.1
CI/CD & registrystandardMIT
0 CVE
gitops-stack
Hardened GitOps and delivery stack: Argo CD for GitOps sync, Argo Rollouts for canary and blue-green releases, Argo Workflows for pipelines, and Argo…
chart v0.0.9 · app v1.0.0
StacksstandardUnknown
A 1
gogs
Gogs, the painless self-hosted Git service (repositories, issues, pull requests, wikis, webhooks, built-in SSH). Built from source with the…
chart v · app v0.14.3
GitstandardMIT
A 1
gotify
Self-hosted server for sending and receiving real-time push messages over WebSocket, with a web UI and app tokens. From source (UI embedded,…
chart v · app v3.1.1
MessagingstandardMIT
A 1
Grafana
Dashboards and visualization for metrics, logs, and traces across many data sources. OSS edition, licensed AGPL.
chart v · app v13.1.6
ObservabilitystandardAGPL-3.0
C 1
graylog
Graylog, the log-management and analysis server (search, dashboards, alerting, GELF/Beats inputs). Built clean-room on a hardened Wolfi JRE (nonroot,…
chart v · app v7.1.9
ObservabilitystandardSSPL-1.0