StackRadar

redhat-trusted-application-pipeline 1.0.2 Helm chart

openshift

Scored 14 Sept 2026

A Helm chart for deploying Red Hat Trusted Application Pipeline

Version 1.0.2app version 1.1.x (not verified against the render) 0Artifact Hub

redhat-trusted-application-pipeline 1.0.2 deploys 2 container images: registry.redhat.io/openshift4/ose-tools-rhel8 and quay.io/redhat-appstudio/appstudio-utils. Across the 1 measured, 605 findings12 critical, 17 high 6 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-60.el9, fixed in 0:2.34-100.el9_4.2. Chart.yaml declares kubeVersion >= 1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

8,5991217131445

605 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
registry.redhat.io/openshift4/ose-tools-rhel8×5latestunmeasured
quay.io/redhat-appstudio/appstudio-utilsdbbdd82734232e6289e8fbae5b4c858481a7c05712171314458,599

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

605 distinct across the version’s images
SeverityAdvisoryPackageFixed in
LowGHSA-xf85-363p-868woras.land/oras-go/v2@v2.3.02.6.1
LowGHSA-xf85-363p-868woras.land/oras-go@v1.1.1no fix listed
LowGHSA-3633-5h82-39pqgithub.com/theupdateframework/go-tuf@v0.0.0-20211203210025-7ded50136bf90.3.2
LowGHSA-c9cp-9c75-9v8cgithub.com/containerd/containerd@v1.5.11.5.11
LowGHSA-vp35-85q5-9f25github.com/docker/docker@v20.10.8+incompatible20.10.20

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.2latest1.1.x12171314458,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/redhat-trusted-application-pipeline.svg)](https://charts.stackradar.io/charts/openshift/redhat-trusted-application-pipeline)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.