Charts

5 charts

Workflow charts

Hardened Helm charts in the workflow category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.
chart v0.1.6 · app v3.3.0
سير العملstandardApache-2.0
0 CVE
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi base; Cassandra or a SQL store is the operator's concern.
chart v0.0.6 · app v1.4.1
سير العملstandardMIT
0 CVE
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.
chart v · app v2.32.6
سير العملstandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
Temporal
محرك تنسيق سير عمل متين يحفظ حالة التنفيذ بحيث تبقى العمليات طويلة الأمد متعددة الخطوات بعد الأعطال وتستأنف من حيث توقفت تماماً.
chart v · app v1.31.2
سير العملstandardMIT
0 CVE
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from source on Wolfi nodejs-22 (native better-sqlite3), nonroot on a hardened read-only-rootfs base. Single-instance with an embedded SQLite store on a persistent volume; the chart runs it as a StatefulSet.
chart v · app v1.0.86
سير العملstandardBSD-3-Clause