Charts

281 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 281 charts.

A+
guacamole
Apache Guacamole, clientless remote desktop in the browser for RDP, VNC, SSH and telnet hosts, as the web app (pair it with guacd). Assembled from…
chart v · app v1.6.0
Apps & productivitystandardApache-2.0
A+
HAProxy
High-performance TCP and HTTP load balancer and reverse proxy known for reliability and fine-grained traffic control at scale.
chart v · app v3.4.0
GatewaystandardGPL-2.0+
0 CVE
harbor
Hardened harbor image, built from source on Wolfi.
chart v0.0.37 · app v2.15.2
DatastorestandardUnknown
0 CVE
Harbor observability
Hardened harbor-observability image, built from source on Wolfi.
chart v0.0.14 · app v2.14.4
DatastorestandardUnknown
A+
hasura
Hasura GraphQL Engine, an instant GraphQL API with permissions over PostgreSQL. The Apache-2.0 Community Edition server and console, taken by digest…
chart v · app v2.50.3
Databases & enginesstandardApache-2.0
A 1
headscale
Open-source, self-hosted implementation of the Tailscale control server for coordinating a WireGuard mesh. Single static Go binary on a hardened…
chart v · app v0.29.4
Coordination & meshstandardBSD-3-Clause
D 1
homepage
Homepage, a services and bookmarks dashboard with live widgets for hundreds of self-hosted apps. A Next.js app built from source into its standalone…
chart v · app v2.4.0
Apps & productivitystandardGPL-3.0
A+
httpd
Apache HTTP Server, the long-standing open-source web server and reverse proxy for serving static content and fronting application backends…
chart v · app v2.4.69
GatewaycriticalApache-2.0
A+
hubble-relay
Hubble Relay, Cilium's cluster-wide aggregator of Hubble network-flow observability (one Observer API across every node). Built from the…
chart v · app v1.20.2
Coordination & meshstandardApache-2.0
A+
hubble-ui
Hubble UI, Cilium's web UI for the service map and live network flows. The React frontend built from source and served by a Wolfi nginx that proxies…
chart v · app v0.13.6
Coordination & meshstandardApache-2.0
D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
chart v · app v26.2.0
IdentitystandardApache-2.0
0 CVE
identity-stack
Hardened, operator-free self-hosted SSO/identity stack: Keycloak (OIDC/SAML identity provider) + PostgreSQL (Keycloak's database) + oauth2-proxy (an…
chart v0.0.24 · app v1.0.0
StacksstandardUnknown