Charts

5 charts

Workflow charts

Hardened Helm charts in the workflow category. Each deploys our hardened image pinned by its signed digest, with production defaults.

0 CVE
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.
chart v0.1.6 · app v3.3.0
WorkflowstandardApache-2.0
0 CVE
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi base; Cassandra or a SQL store is the operator's concern.
chart v0.0.6 · app v1.4.1
WorkflowstandardMIT
0 CVE
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.
chart v · app v2.32.6
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
Temporal
Durable workflow orchestration engine that persists execution state so long-running, multi-step processes survive crashes and resume exactly where they left off.
chart v · app v1.31.2
WorkflowstandardMIT
0 CVE
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from source on Wolfi nodejs-22 (native better-sqlite3), nonroot on a hardened read-only-rootfs base. Single-instance with an embedded SQLite store on a persistent volume; the chart runs it as a StatefulSet.
chart v · app v1.0.86
WorkflowstandardBSD-3-Clause