Helm Charts

Pre-patched wrapper Helm charts that override upstream image references with Verity's security-patched equivalents. Install a chart and every container image is already patched.

Charts

Image Overrides

OCI

Registry

How it works

1. Wrapper chart

A thin Helm chart that declares the original chart as a dependency and overrides values.yaml to point image references at patched versions.

2. OCI registry

Wrapper charts are pushed to oci://ghcr.io/verity-org/charts and can be installed directly via helm install.

3. Drop-in replace

Install the wrapper chart instead of the original. Helm resolves the dependency and applies all patched image overrides automatically.

Available Charts

prometheus

v28.9.1

2482

3 image overrides

Source: oci://ghcr.io/prometheus-community/charts

Install

                    helm install prometheus oci://ghcr.io/verity-org/charts/prometheus --version 28.9.1

Original	Patched	CVEs
quay.io/prometheus/node-exporter:v1.10.2	ghcr.io/verity-org/prometheus/node-exporter:v1.10.2	1461
quay.io/prometheus-operator/prometheus-config-reloader:v0.89.0	ghcr.io/verity-org/prometheus-operator/prometheus-config-reloader:v0.89.0	121
configmapReload.prometheus.image

victoria-logs-single

v0.11.26

2 image overrides

Source: https://victoriametrics.github.io/helm-charts

Install

                    helm install victoria-logs-single oci://ghcr.io/verity-org/charts/victoria-logs-single --version 0.11.26

Original	Patched	CVEs
victoriametrics/victoria-logs:v1.45.0	ghcr.io/verity-org/victoriametrics/victoria-logs:v1.45.0	21
server.image

postgres-operator

v1.15.1

1231

2 image overrides

Source: https://opensource.zalando.com/postgres-operator/charts/postgres-operator

Install

                    helm install postgres-operator oci://ghcr.io/verity-org/charts/postgres-operator --version 1.15.1

Original	Patched	CVEs
ghcr.io/zalando/postgres-operator:v1.15.1	ghcr.io/verity-org/zalando/postgres-operator:v1.15.1	1231
image

Charts generated daily at 04:00 UTC. Powered by Verity chart-gen.