Charts

136 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 136 charts.

A+
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from source on Wolfi nodejs-22 (native better-sqlite3), nonroot on a hardened read-only-rootfs base. Single-instance with an embedded SQLite store on a persistent volume; the chart runs it as a StatefulSet.
chart v · app v1.0.86
WorkflowstandardBSD-3-Clause
0 CVE
zitadel
Hardened zitadel image, built from source on Wolfi.
chart v0.0.8 · app v4.16.2
DatastorestandardUnknown
A+
ZooKeeper
Centralized coordination service for distributed systems, providing configuration, naming, leader election, and synchronization primitives.
chart v · app v3.9.5
CoordinationstandardApache-2.0
B 1
zot
OCI-native container registry (registry, sync, and dist-spec surface). Built from source as a static Go binary on a hardened nonroot Wolfi base; filesystem storage under a writable volume.
chart v · app v2.1.18
RegistrystandardApache-2.0