Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

C 1
wildfly
WildFly, the Jakarta EE application server, on a Wolfi openjdk-21 JRE. Nonroot, read-only rootfs (all runtime writes under /tmp), HTTP on 8080 and…
chart v · app v41.0.1
GatewaystandardApache-2.0
D 1
wiremock
WireMock, the HTTP API mock server (stubs, response templating, proxying and recording, fault injection, request journal, admin API) on Jetty 12.…
chart v · app v3.13.2
CIstandardApache-2.0
A 8
woodpecker
Lightweight, container-native CI/CD engine (a Drone-compatible fork) with a server, agent, and CLI. From source (Vue UI embedded in the static Go…
chart v · app v3.18.1
CI/CD & registrystandardApache-2.0
A+
wordpress
WordPress, the PHP content-management system and blogging platform. Reconstructed clean-room from the official release on a hardened Wolfi…
chart v · app v7.1.3
Apps & productivitystandardGPL-2.0+
D 11
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from…
chart v · app v1.1.9
WorkflowstandardBSD-3-Clause
A+
yourls
YOURLS, the self-hosted URL shortener with click stats, an admin UI and an API. The release tarball on Wolfi php-fpm behind QuenchWorks nginx (8080),…
chart v · app v1.10.6
Apps & productivitystandardMIT
0 CVE
zabbix
Hardened zabbix image, built from source on Wolfi.
chart v0.0.9 · app v7.4.15
DatastorestandardUnknown
D 4
zipkin
Zipkin, the distributed tracing server (HTTP, gRPC, Kafka, RabbitMQ and ActiveMQ collection, the query API and the Lens UI on 9411). The official…
chart v · app v3.6.1
ObservabilitystandardApache-2.0
D 8
zitadel
Cloud-native identity and access management (IAM) with OIDC/OAuth2/SAML, multi-tenancy, and a built-in admin console. Packaged from ZITADEL's…
chart v · app v4.19.5
IdentitystandardAGPL-3.0
D 3
ZooKeeper
Centralized coordination service for distributed systems, providing configuration, naming, leader election, and synchronization primitives.
chart v · app v3.9.6
CoordinationstandardApache-2.0
D 4
zot
OCI-native container registry (registry, sync, and dist-spec surface). Built from source as a static Go binary on a hardened nonroot Wolfi base;…
chart v · app v2.1.22
RegistrystandardApache-2.0
C 4
ztunnel
Istio's ambient-mode node proxy (ztunnel, Rust), built from source from the istio/ztunnel tags on the same three lines as istiod, with aws-lc TLS and…
chart v · app v1.30.7
Coordination & meshstandardApache-2.0