redhat-trusted-application-pipeline 1.0.2 Helm chart

Name: redhat-trusted-application-pipeline Helm chart 1.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart for deploying Red Hat Trusted Application Pipeline

Version 1.0.2app version 1.1.x (not verified against the render) 0Artifact Hub

redhat-trusted-application-pipeline 1.0.2 deploys 2 container images: registry.redhat.io/openshift4/ose-tools-rhel8 and quay.io/redhat-appstudio/appstudio-utils. Across the 1 measured, 605 findings — 12 critical, 17 high — 6 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-60.el9, fixed in 0:2.34-100.el9_4.2. Chart.yaml declares kubeVersion >= 1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

8,5991217131445

605 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.redhat.io/openshift4/ose-tools-rhel8×5	latest	—	unmeasured
quay.io/redhat-appstudio/appstudio-utils	dbbdd82734232e6289e8fbae5b4c858481a7c057	1217131445	8,599

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

131 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

Severity	Advisory	Package	Fixed in
Medium	RHSA-2024:3926	expat@2.5.0-1.el9	0:2.5.0-1.el9_2.1
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20211208012354-db4efeb81f4b	0.4.0
Medium	RHSA-2024:9098	skopeo@2:1.11.2-0.1.el9	2:1.16.1-1.el9
Medium	RHSA-2024:5643	krb5@1.20.1-9.el9_2	0:1.20.1-9.el9_2.1
Medium	RHSA-2024:6166	krb5@1.20.1-9.el9_2	0:1.21.1-2.el9_4
Medium	GHSA-2m4x-4q9j-w97g	github.com/open-policy-agent/opa@v0.40.0	0.42.0
Medium	RHSA-2026:20612	gnutls@3.7.6-21.el9_2	0:3.8.10-4.el9_8
Medium	RHSA-2026:41921	gnutls@3.7.6-21.el9_2	0:3.7.6-21.el9_2.7
Medium	GHSA-6wvf-f2vw-3425	github.com/containers/image/v5@v5.15.0	5.29.3
Medium	RHSA-2024:6754	expat@2.5.0-1.el9	0:2.5.0-2.el9_4.1
Medium	RHSA-2025:8181	openldap@2.6.2-3.el9	0:2.6.2-3.el9_2.1
Medium	RHSA-2024:0533	gnutls@3.7.6-21.el9_2	0:3.7.6-23.el9_3.3
Medium	RHSA-2024:1082	gnutls@3.7.6-21.el9_2	0:3.7.6-21.el9_2.2
Medium	RHSA-2025:0925	bzip2@1.0.8-8.el9	0:1.0.8-10.el9_5
Medium	GHSA-j8r2-6x86-q33q	requests@2.25.1	2.31.0
Medium	RHSA-2023:7762	skopeo@2:1.11.2-0.1.el9	2:1.13.3-3.el9_3
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	RHSA-2024:4502	skopeo@2:1.11.2-0.1.el9	2:1.14.3-3.el9_4
Medium	PYSEC-2023-192	urllib3@1.26.5	2.0.6
Medium	GO-2022-0433	stdlib@go1.17.6	1.17.9
Medium	GHSA-f524-rf33-2jjr	github.com/open-policy-agent/opa@v0.40.0	0.43.1
Medium	RHSA-2024:6510	emacs@1:27.2-8.el9_2.1	1:27.2-10.el9_4
Medium	RHSA-2025:10136	python3.9@3.9.16-1.el9_2.1	0:3.9.21-2.el9_6.1
Medium	RHSA-2025:2482	libxml2@2.9.13-3.el9_2.1	0:2.9.13-3.el9_2.6
Medium	RHSA-2025:2679	libxml2@2.9.13-3.el9_2.1	0:2.9.13-6.el9_5.2
Medium	GHSA-3fwx-pjgw-3558	github.com/docker/docker@v20.10.8+incompatible	20.10.9
Medium	PYSEC-2024-60	idna@2.10	3.7
Medium	GO-2026-4887	github.com/docker/docker@v23.0.5+incompatible	no fix listed
Medium	RHSA-2024:2679	libxml2@2.9.13-3.el9_2.1	0:2.9.13-6.el9_4
Medium	GHSA-xfhp-jf8p-mh5w	github.com/hashicorp/go-getter@v1.5.10	1.7.5
Medium	RHSA-2024:10983	python3.9@3.9.16-1.el9_2.1	0:3.9.21-1.el9_5
Medium	GHSA-ppp9-7jff-5vj2	golang.org/x/text@v0.3.6	0.3.7
Medium	RHSA-2025:22034	expat@2.5.0-1.el9	0:2.5.0-1.el9_2.3
Medium	RHSA-2025:3531	expat@2.5.0-1.el9	0:2.5.0-3.el9_5.3
Medium	RHSA-2025:10407	python-setuptools@53.0.0-12.el9	0:53.0.0-13.el9_6.1
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.28.0	1.33.0
Medium	RHSA-2024:2239	skopeo@2:1.11.2-0.1.el9	2:1.14.3-0.1.el9
Medium	RHSA-2026:8510	libarchive@3.5.3-4.el9	0:3.5.3-9.el9_7
Medium	RHSA-2026:8864	libarchive@3.5.3-4.el9	0:3.5.3-5.el9_2.2
Medium	GHSA-m3r6-h7wv-7xxv	github.com/moby/buildkit@v0.11.5	0.12.5
Medium	RHSA-2023:5462	python3.9@3.9.16-1.el9_2.1	0:3.9.16-1.el9_2.2
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.52.0
Medium	RHSA-2025:6977	python3.9@3.9.16-1.el9_2.1	0:3.9.21-2.el9
Medium	RHSA-2024:0465	sqlite@3.34.1-6.el9_1	0:3.34.1-7.el9_3
Medium	GHSA-2xpw-w6gg-jr37	urllib3@1.26.5	2.6.0
Medium	GHSA-gm62-xv2j-4w53	urllib3@1.26.5	2.6.0
Medium	RHSA-2024:9331	krb5@1.20.1-9.el9_2	0:1.21.1-3.el9
Medium	RHSA-2024:11217	skopeo@2:1.11.2-0.1.el9	2:1.16.1-2.el9_5
Medium	GHSA-gwc9-m7rh-j2ww	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20211202192323-5770296d904e
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.52.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.2latest	—	1.1.x	1217131445	8,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/redhat-trusted-application-pipeline.svg)](https://charts.stackradar.io/charts/openshift/redhat-trusted-application-pipeline)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.