Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

A+
mediawiki
MediaWiki, the wiki engine behind Wikipedia. The official release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only rootfs), with…
chart v · app v1.46.2
Apps & productivitystandardGPL-2.0+
F 5
Meilisearch
Fast, typo-tolerant full-text search engine with an instant-search API, easy to embed for site and in-app search with relevant results out of the box.
chart v · app v1.53.3
SearchstandardMIT
A+
Memcached
Simple, high-performance distributed in-memory cache for storing small objects and database query results to reduce backend load.
chart v · app v1.6.45
CachestandardBSD-3-Clause
0 CVE
mesh-stack
Istio ambient mesh in one install: istiod (control plane and certificate authority), the istio-cni node agent and ztunnel, wired for ambient so every…
chart v0.0.8 · app v1.30.7
StacksstandardUnknown
D 1
metabase
Metabase open-source edition, self-service BI and dashboards over PostgreSQL, MySQL and many other databases. The official uberjar on Java 25, with…
chart v · app v0.63.20
Apps & productivitystandardAGPL-3.0
0 CVE
metallb
Hardened metallb image, built from source on Wolfi.
chart v0.0.5 · app v0.16.0
DatastorestandardUnknown
A 3
metrics-server
Kubernetes Metrics Server, the cluster-wide aggregator of resource usage that backs `kubectl top` and the Horizontal Pod Autoscaler. Scrapes kubelet…
chart v · app v0.9.0
ObservabilitystandardApache-2.0
D 6
mimir
Horizontally scalable, highly available long-term storage for Prometheus metrics. Single static Go binary (all-in-one or microservices target) on a…
chart v · app v3.2.3
ObservabilitystandardAGPL-3.0
D 6
miniflux
Minimalist, opinionated RSS and Atom feed reader with a clean web UI and a REST API. Single pure-Go static binary on a hardened nonroot Wolfi base;…
chart v · app v2.3.4
Apps & productivitystandardApache-2.0
0 CVE
ml-stack
Hardened machine-learning stack: JupyterHub notebooks, the MLflow tracking server and model registry, and Label Studio for data labeling, wired…
chart v0.0.26 · app v1.0.0
StacksstandardUnknown
A+
mlflow
MLflow Tracking Server for the ML lifecycle — experiment tracking, model registry, and run metadata over a REST/UI on port 5000. Packaged as the…
chart v · app v3.16.1
Machine learning & AIstandardApache-2.0
D 3
mongo-express
Mongo Express, the web admin UI for MongoDB and MongoDB-compatible servers such as FerretDB. The tagged source with its webpack UI bundle and pinned…
chart v · app v1.1.0-rc-4
Apps & productivitystandardMIT