WizOS (Product): news timeline & CVEs

Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

Wiz releases hardened WizOS Helm charts after finding supply-chain risks in 61 popular chart repositories.

Wiz introduced secured Helm charts for WizOS, maintained to the same hardening standards as its base images. Wiz Research reviewed build pipelines behind 1,500 popular Artifact Hub charts, mapping them to 814 GitHub repositories. Sixty-one repositories (7.5 percent) had a confirmed supply-chain risk, including nine critical or high findings, weak CI/CD in 20 charts, and unmaintained upstreams in 25. KubeView’s go.mod pointed at a nonexistent GitHub user, fixed in 2.2.1, and Meilisearch’s chart workflow allowed script injection from any commenter; both issues were reported and fixed.

Wiz BlogSep 30, 15:52 UTC · 9h agoTools

How Developers Prevent Production Risk at the Source

Wiz argues shift-left code-stage security cuts remediation costs and ships Wiz Code, WizOS, and WizCLI to catch flaws pre-deployment.

A Wiz blog post argues that fixing vulnerabilities at the code stage costs a fraction of production remediation, citing the node:20-slim base image which ships 14 known CVEs, three of them critical. It claims AI agents can now analyze open-source commits and generate working exploits in minutes, shrinking the window between a public fix and automated attacks. The post promotes WizOS near-zero-CVE base images, WizCLI and MCP-server checks inside developer and AI agent sessions, and Wiz Code scanning across pull requests, repositories, and pipelines covering SAST, SCA, secrets, and IaC misconfigurations.

Wiz BlogSep 3, 00:31 UTC · 28d agoIndustry1

WizOS

Timeline2 articles

Appears with

Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

How Developers Prevent Production Risk at the Source