Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Wiz releases hardened WizOS Helm charts after finding supply-chain risks in 61 popular chart repositories.
Wiz introduced secured Helm charts for WizOS, maintained to the same hardening standards as its base images. Wiz Research reviewed build pipelines behind 1,500 popular Artifact Hub charts, mapping them to 814 GitHub repositories. Sixty-one repositories (7.5 percent) had a confirmed supply-chain risk, including nine critical or high findings, weak CI/CD in 20 charts, and unmaintained upstreams in 25. KubeView’s go.mod pointed at a nonexistent GitHub user, fixed in 2.2.1, and Meilisearch’s chart workflow allowed script injection from any commenter; both issues were reported and fixed.
46