StackRadar

wiremock Helm chart

helm-charts-nr

Scored 14 Sept 2026

A service virtualization tool (some call it mock server) for testing purposes. This is a templated deployment of [WireMock](http://wiremock.org/) for mocking services during test scenario execution for load tests as well as for manual and automated QA purposes. By default the chart will install WireMock with only a `/status` mapping for readiness probes. One can utilize it's HTTP API as well as the file configuration documented in the [Running as a Standalone Process](http://wiremock.org/docs/running-standalone/) described in the "Configuring via JSON over HTTP" and "JSON file configuration" chapters. The JSON file configuration is the recommended setup and the [stub mappings](http://wiremock.org/docs/stubbing/) should be provided in `ConfigMap`s one per folder. > :warning: both folders `mappings` and `__files` are optional but each folder requires it's own `ConfigMap`. The `-mappings` and `-files` suffixes are obligate. ```console kubectl create configmap my-service1-stubs-mappings --from-file=path/to/your/service1/mappings kubectl create configmap my-service1-stubs-files --from-file=path/to/your/service1/__files kubectl create configmap my-service2-stubs-mappings --from-file=path/to/your/service2/mappings kubectl create configmap my-service2-stubs-files --from-file=path/to/your/service2/__files ``` Install the chart passing the `stubs` as a value omitting the suffixes as both `mappings` and `__files` folders are handled transparently during initialization depending on their existence. ```console helm install my-wiremock deliveryhero/wiremock \ --set consumer=my-consumer --set "consumer.stubs.my-service1-stubs=/mnt/my-service1-stubs" \ --set "consumer.stubs.my-service2-stubs=/mnt/my-service2-stubs" ``` WireMock's [admin API](http://wiremock.org/docs/api/) is not publicly exposed, but can be accessed using port forwarding. ```console kubectl port-forward my-wiremock-123456789a-bcdef 8080 ``` The HTTP API can then be accessed using `http://localhost:8080/__admin/docs/` where a swagger UI is availabe. > :warning: this does not work out for multi instance setups as there is no synchronization of mappings created using the HTTP API between multiple instances. In case JSON files need to be provided, which are too large for usual `ConfigMap`s, one can define a binary config map with a zip archive that contains the file in question. ```console gzip large.json kubectl create configmap my-binary-stub --from-file=large.json.gz ``` The resulting archive can be best installed in the wiremock using a `values.yaml` file. ```yaml consumer: initContainer: - name: unzip-large-file image: busybox:latest command: ["sh", "-c", "cp /archive/large.json.gz /working/mappings; gunzip /working/mappings/large.json.gz"] volumeMounts: - mountPath: /working name: working - mountPath: /archive name: my-binary-stub initVolume: - name: my-binary-stub configMap: name: my-binary-stub ```

Latest 1.4.6 1 year agoapp version 2.26.0 0Artifact Hub

wiremock 1.4.6 deploys 2 container images: library/busybox and rodolpheche/wiremock. Across them, 112 findings2 critical, 8 high 3 on CISA KEV. The highest contribution is GHSA-599f-7c49-w659 in commons-text 1.6, fixed in 1.10.0.

Radar Score

2,140284359

112 findings over 2 of 2 images measured

KEV ×3 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
library/busyboxlatest00000
rodolpheche/wiremock2.26.02843592,140

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

112 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowDLA-2424-1tzdata@2019c-0+deb9u12020d-0+deb9u1
LowDLA-2509-1tzdata@2019c-0+deb9u12020e-0+deb9u1
LowDLA-2542-1tzdata@2019c-0+deb9u12021a-0+deb9u1
LowDLA-2593-1ca-certificates@20161130+nmu1+deb9u120200601~deb9u2
LowDLA-2759-1gnutls28@3.5.8-5+deb9u43.5.8-5+deb9u6
LowDLA-2761-1openssl1.0@1.0.2u-1~deb9u11.0.2u-1~deb9u5
LowDLA-2797-1tzdata@2019c-0+deb9u12021a-0+deb9u2
LowDLA-2948-1debian-archive-keyring@2017.5+deb9u12017.5+deb9u2
LowDLA-2963-1tzdata@2019c-0+deb9u12021a-0+deb9u3
LowDLA-3051-1tzdata@2019c-0+deb9u12021a-0+deb9u4
LowGHSA-58qw-p7qm-5rvhjetty-xml@9.4.20.v201908139.4.52.v20230823
LowGHSA-chfm-68vv-pvw5xmlunit-core@2.6.22.10.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.4.6latest1 year ago2.26.02843592,140

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/helm-charts-nr/wiremock.svg)](https://charts.stackradar.io/charts/helm-charts-nr/wiremock)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.