drone-runner-docker Helm chart

Name: drone-runner-docker Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

drone

Scored 14 Sept 2026

A Helm chart for the Drone Docker runner which uses Docker-in-Docker (dind)

Latest 0.7.0 2 years agoapp version 1.8.1 3Artifact Hub

drone-runner-docker 0.7.0 deploys 3 container images: library/docker, drone/gc and drone/drone-runner-docker. Across the 2 measured, 444 findings — 3 critical, 18 high — 2 on CISA KEV. The highest contribution is ALPINE-CVE-2024-6387 in openssh 9.3_p1-r3, fixed in 9.3_p2-r2. Chart.yaml declares kubeVersion ^1.13.0-0; rendered for Kubernetes 1.13.0.

Radar Score

5,67431877346

444 findings over 2 of 3 images measured

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
library/docker	20-dind	1938172	2,787
drone/gc	1.0.0	—	not yet scanned
drone/drone-runner-docker	1.8.1	2939174	2,887

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

High findings

14 distinct across the version’s images

High: findings whose contribution to the Radar Score is 40–69. Show every band

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2024-6119	openssl@3.1.0-r4	3.1.7-r0
High	ALPINE-CVE-2023-0286	openssl@1.1.1n-r0	1.1.1t-r0
High	ALPINE-CVE-2023-2650	openssl@1.1.1n-r0	1.1.1u-r0
High	ALPINE-CVE-2023-48795	openssh@9.3_p1-r3	9.3_p2-r1
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4	0.0.0-20231218163308-9d2ee975ef9f
High	ALPINE-CVE-2022-37434	zlib@1.2.12-r0	1.2.12-r2
High	GHSA-v23v-6jw2-98fq	github.com/docker/docker@v23.0.0-rc.1+incompatible	23.0.15
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3	0.23.0
High	GHSA-crp2-qrr5-8pq7	github.com/containerd/containerd@v1.3.4	1.4.13
High	GHSA-xr7r-f8xq-vfvv	github.com/opencontainers/runc@v1.1.5	1.1.12
High	ALPINE-CVE-2024-2511	openssl@3.1.0-r4	3.1.4-r6
High	GHSA-ffhg-7mh4-33c4	golang.org/x/crypto@v0.0.0-20190621222207-cc06ce4a13d4	0.0.0-20200220183623-bac4c82f6975
High	ALPINE-CVE-2022-4450	openssl@1.1.1n-r0	1.1.1t-r0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.7.0latest	2 years ago	1.8.1	31877346	5,674

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/drone/drone-runner-docker.svg)](https://charts.stackradar.io/charts/drone/drone-runner-docker)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.