Charts

5 charts

Security & supply chain charts

Hardened Helm charts in the security & supply chain category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
chart v0.0.11 · app v2.10.0
Security & supply chainstandardApache-2.0
0 CVE
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
chart v · app v1.19.1
Security & supply chainstandardApache-2.0
0 CVE
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
chart v · app v1.20.2
Security & supply chainstandardApache-2.0
0 CVE
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
chart v · app v0.38.4
Security & supply chainstandardApache-2.0
0 CVE
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
chart v · app v0.30.2
Security & supply chainstandardApache-2.0