Charts

297 charts

Hardened Helm charts

Each chart deploys our hardened image pinned by its signed digest, with sensible production defaults. Cosign-signed and published as an ArtifactHub verified publisher. 297 charts.

A+
Neo4j
Graph database for highly connected data, queried with Cypher for traversals and relationship-heavy workloads. Community edition is GPLv3.
chart v · app v2026.09.0
GraphlowGPL-3.0
A+
nessie
Project Nessie, the transactional catalog for data lakehouse tables (Git-like branches and commits over Iceberg, plus the Iceberg REST catalog). The…
chart v · app v0.108.8
Databases & enginesstandardApache-2.0
A+
nextcloud
Nextcloud, the self-hosted file-sync and content-collaboration platform. Reconstructed clean-room on a hardened Wolfi php-8.4-fpm + nginx runtime…
chart v · app v34.0.4
Apps & productivitystandardAGPL-3.0
A+
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
chart v · app v1.30.5
GatewaycriticalBSD-2-Clause
A+
nginx-gateway-fabric
NGINX Gateway Fabric control plane: the F5/NGINX Gateway API implementation. Watches GatewayClass, Gateway, HTTPRoute and its own gateway.nginx.org…
chart v · app v2.7.2
GatewaystandardApache-2.0
A+
nifi
Apache NiFi, the visual dataflow engine for routing, transforming and moving data between systems. Assembled from Apache's binary distribution on…
chart v · app v2.12.0
WorkflowstandardApache-2.0
A 1
node-exporter
Prometheus exporter for host-level hardware and OS metrics (CPU, memory, disk, network) on Linux machines.
chart v · app v1.12.1
Metrics/ExporterstandardApache-2.0
A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
chart v · app v1.3.0
MessagingstandardMIT
A 1
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
chart v · app v2.28.0
MessagingstandardApache-2.0
A 1
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
chart v · app v7.15.5
Secrets & identitystandardMIT
0 CVE
observability-stack
Hardened, operator-free observability stack: Prometheus + Grafana + Alertmanager + kube-state-metrics + node-exporter + cAdvisor, wired together for…
chart v0.0.27 · app v2.20.0
StacksstandardUnknown
A+
odoo
Odoo Community Edition, the Python ERP and business apps suite (CRM, sales, inventory, accounting, website) backed by PostgreSQL. Built from the…
chart v · app v19.0.20261012
Apps & productivitystandardLGPL-3.0