edp-install 3.16.0 Helm chart

Name: edp-install Helm chart 3.16.0: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

epmdedp

Scored 22 Oct 2026

A Helm chart for KubeRocketCI Platform

Version 3.16.0 2 days agodeploys tag 2.33.1 0Artifact Hub

edp-install 3.16.0 deploys 7 container images: epamedp/cd-pipeline-operator, epamedp/codebase-operator, library/busybox, ghcr.io/kuberocketci/krci-cache and 3 more. Across them, 158 findings — 0 critical, 0 high. The highest contribution is ALPINE-CVE-2026-63073 in openssl 3.5.7-r0, fixed in 3.5.8-r0.

Radar Score

1,8760022136

158 findings over 7 of 7 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
epamedp/cd-pipeline-operator	2.33.1	00111	131
epamedp/codebase-operator	2.36.0	0019	108
library/busybox	1.36.1	0000	0
ghcr.io/kuberocketci/krci-cache	0.3.0	001879	1,200
epamedp/edp-tekton×2	0.28.0	0016	79
epamedp/gitfusion	0.7.0	00110	135
epamedp/krci-portal	0.9.0	00021	223

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

125 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	ALPINE-CVE-2026-70457	rsync@3.4.3-r0	3.5.0-r0
Low	GHSA-c2c7-rcm5-vvqj	picomatch@4.0.3	4.0.4
Low	ALPINE-CVE-2026-85091	zlib@1.3.2-r0	1.3.2-r1
Low	GO-2026-5970	golang.org/x/text@v0.37.0	0.39.0
Low	GO-2025-3521	k8s.io/kubernetes@v1.34.2	no fix listed
Low	ALPINE-CVE-2026-53789	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-6303	golang.org/x/crypto@v0.52.0	0.55.0
Low	GHSA-vfp3-v2gw-7wfq	github.com/labstack/echo/v4@v4.13.4	4.15.3
Low	GO-2026-6354	golang.org/x/crypto@v0.55.0	0.56.0
Low	GO-2026-6617	stdlib@go1.25.8	1.26.9
Low	GO-2026-6617	golang.org/x/net@v0.58.0	0.60.0
Low	ALPINE-CVE-2026-75803	openssl@3.5.7-r0	3.5.8-r0
Low	GO-2026-6608	stdlib@go1.25.8	1.26.9
Low	GHSA-f886-m6hf-6m8v	brace-expansion@2.0.2	2.0.3
Low	ALPINE-CVE-2026-53794	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-6607	stdlib@go1.25.8	1.26.9
Low	GO-2026-5774	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	ALPINE-CVE-2026-70462	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-6609	stdlib@go1.25.8	1.26.9
Low	ALPINE-CVE-2026-53801	rsync@3.4.3-r0	3.5.0-r0
Low	GHSA-259r-337f-4rfw	github.com/klauspost/compress@v1.18.0	1.18.7
Low	GO-2026-4946	stdlib@go1.25.8	1.25.9
Low	ALPINE-CVE-2026-53795	rsync@3.4.3-r0	3.5.0-r0
Low	GHSA-6j4f-fj2g-mc7p	brace-expansion@2.0.2	2.1.5
Low	GHSA-qhr7-859c-m2p7	brace-expansion@2.0.2	2.1.6
Low	GHSA-w4pp-8pjf-rmxw	pacote@20.0.1	21.5.1
Low	GO-2026-6629	golang.org/x/text@v0.37.0	0.41.0
Low	ALPINE-CVE-2026-53784	rsync@3.4.3-r0	3.5.0-r0
Low	ALPINE-CVE-2026-53802	rsync@3.4.3-r0	3.5.0-r0
Low	ALPINE-CVE-2026-53803	rsync@3.4.3-r0	3.5.0-r0
Low	ALPINE-CVE-2026-53798	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-6613	stdlib@go1.25.8	1.26.9
Low	ALPINE-CVE-2026-53786	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-6605	stdlib@go1.25.8	1.26.9
Low	GO-2026-6610	golang.org/x/net@v0.58.0	0.60.0
Low	GO-2026-6610	stdlib@go1.25.8	1.26.9
Low	ALPINE-CVE-2026-63074	openssl@3.5.7-r0	3.5.8-r0
Low	ALPINE-CVE-2026-53792	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-4970	stdlib@go1.25.8	1.25.12
Low	GO-2026-5777	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	GHSA-rpw4-54j3-4h4q	ip-address@10.1.0	10.5.1
Low	GHSA-j6r3-76f7-8jcv	ip-address@10.1.0	10.7.1
Low	ALPINE-CVE-2026-53788	rsync@3.4.3-r0	3.5.0-r0
Low	GO-2026-4980	stdlib@go1.25.8	1.25.10
Low	ALPINE-CVE-2026-70454	rsync@3.4.3-r0	3.5.0-r0
Low	GHSA-rj75-hqrm-r3gf	postcss-selector-parser@7.1.1	7.1.6
Low	GHSA-52v5-jr5w-gjxr	sigstore@3.1.0	4.1.1
Low	GO-2026-5775	github.com/go-chi/chi/v5@v5.2.4	5.3.0
Low	GO-2026-4864	stdlib@go1.25.8	1.25.9
Low	GHSA-v2v4-37r5-5v8g	ip-address@10.1.0	10.1.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
3.16.0latest	2 days ago	2.33.1	0022136	1,876
3.15.0	29 days ago	2.32.0	0251269	3,921

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/epmdedp/edp-install.svg)](https://charts.stackradar.io/charts/epmdedp/edp-install)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.