Charts

312 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 312 charts.

0 CVE
cnpg-stack
Operator-managed HA PostgreSQL in one install: the CloudNativePG operator + a replicated Cluster (streaming replication, automated failover, built-in…
chart v0.0.8 · app v1.30.1
StacksstandardUnknown
D 31
CockroachDB
Distributed SQL database with PostgreSQL wire compatibility and automatic horizontal scaling and survivability. BUSL is source-available, not…
chart v0.0.11 · app v26.2.7
RelationallowBUSL-1.1
D 13
code-server
VS Code in the browser (Coder's code-server), a full IDE served over HTTP. Ships Coder's official prebuilt release (bundled Node 24 + compiled VS…
chart v0.0.23 · app v4.139.1
Developer tools / IDEstandardMIT
D 43
concourse
Concourse CI, built from the release tag with its web UI compiled and embedded in the one Go binary, the containerd, grpc and otel modules floated to…
chart v0.0.10 · app v8.3.1
CI/CD & registrystandardApache-2.0
D 9
connaisseur
Connaisseur, the Kubernetes admission controller that verifies container image signatures (Cosign/Sigstore, Notary v1 and v2) against trust roots…
chart v0.0.5 · app v3.13.1
Security & supply chainstandardApache-2.0
A 2
contour
Project Contour, the CNCF Kubernetes ingress controller that programs Envoy over xDS. Serves HTTPProxy and Ingress plus Gateway API, and one binary…
chart v · app v1.33.7
GatewaystandardApache-2.0
0 CVE
coolify
Hardened coolify image, built from source on Wolfi.
chart v0.0.47 · app v4.3.4
DatastorestandardUnknown
D 8
Coolify Realtime
Realtime server component of Coolify, providing the websocket connections and terminal/log gateway for the dashboard. Licensed AGPL.
chart v0.0.15 · app v1.0.18
PaaSstandardAGPL-3.0+
A 3
coredns
Fast, flexible DNS server that chains plugins to serve DNS and service discovery, the default cluster DNS for Kubernetes.
chart v0.0.17 · app v1.14.7
CoordinationstandardApache-2.0
A 3
coroot
Coroot — open-source observability/APM (eBPF-based metrics, logs, traces, cost insights and service maps) with an embedded Vue UI. Built from source…
chart v0.1.18 · app v1.26.8
ObservabilitystandardApache-2.0
C 4
cosmian-kms
KMIP 2.1 key management server with PKCS#11 and Google/Microsoft CSE support -- the only KMIP speaker in this catalog. Shipped under BUSL-1.1, which…
chart v0.0.10 · app v5.27.1
SecretslowBUSL-1.1
0 CVE
cost-stack
Hardened Kubernetes cost monitoring stack: OpenCost (the CNCF cost model) reading cluster metrics from a bundled Prometheus, plus Grafana with that…
chart v0.0.6 · app v1.121.3
StacksstandardUnknown