redhat-trusted-application-pipeline 1.0.2 Helm chart

Name: redhat-trusted-application-pipeline Helm chart 1.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart for deploying Red Hat Trusted Application Pipeline

Version 1.0.2app version 1.1.x (not verified against the render) 0Artifact Hub

redhat-trusted-application-pipeline 1.0.2 deploys 2 container images: registry.redhat.io/openshift4/ose-tools-rhel8 and quay.io/redhat-appstudio/appstudio-utils. Across the 1 measured, 605 findings — 12 critical, 17 high — 6 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-60.el9, fixed in 0:2.34-100.el9_4.2. Chart.yaml declares kubeVersion >= 1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

8,5991217131445

605 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.redhat.io/openshift4/ose-tools-rhel8×5	latest	—	unmeasured
quay.io/redhat-appstudio/appstudio-utils	dbbdd82734232e6289e8fbae5b4c858481a7c057	1217131445	8,599

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

605 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Medium	GHSA-8c26-wmh5-6g9v	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.0.0-20220314234659-1baeb1ce4c0b
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.11.0	0.17.0
Medium	GHSA-449p-3h89-pw88	github.com/go-git/go-git/v5@v5.3.0	5.11.0
Medium	RHSA-2024:0310	openssl@1:3.0.7-17.el9_2	1:3.0.7-25.el9_3
Medium	GHSA-69cg-p879-7622	golang.org/x/net@v0.0.0-20211208012354-db4efeb81f4b	0.0.0-20220906165146-f3363e06e74c
Medium	GHSA-cx63-2mw6-8hw5	setuptools@53.0.0	70.0.0
Medium	RHSA-2024:5137	python-setuptools@53.0.0-12.el9	0:53.0.0-12.el9_2.1
Medium	GHSA-38jv-5279-wg99	urllib3@1.26.5	2.6.3
Medium	RHSA-2026:1087	python-urllib3@1.26.5-3.el9	0:1.26.5-6.el9_7.1
Medium	RHSA-2026:1693	python-urllib3@1.26.5-3.el9	0:1.26.5-3.el9_2.3
Medium	GHSA-q64h-39hv-4cf7	github.com/hashicorp/go-getter@v1.5.10	1.7.4
Medium	GHSA-v725-9546-7q7m	github.com/go-git/go-git/v5@v5.3.0	5.13.0
Medium	RHSA-2026:10714	openssh@8.7p1-30.el9_2	0:8.7p1-30.el9_2.10
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.46.0	1.79.3
Medium	RHSA-2025:10699	libxml2@2.9.13-3.el9_2.1	0:2.9.13-10.el9_6
Medium	RHSA-2025:12199	libxml2@2.9.13-3.el9_2.1	0:2.9.13-3.el9_2.7
Medium	GHSA-r9hx-vwmv-q579	setuptools@53.0.0	65.5.1
Medium	GHSA-232p-vwff-86mp	github.com/docker/docker@v20.10.8+incompatible	20.10.24
Medium	RHSA-2025:1330	openssl@1:3.0.7-17.el9_2	1:3.2.2-6.el9_5.1
Medium	PYSEC-2025-49	setuptools@53.0.0	78.1.1
Medium	RHSA-2024:6909	python3.9@3.9.16-1.el9_2.1	0:3.9.16-1.el9_2.8
Medium	RHSA-2024:8446	python3.9@3.9.16-1.el9_2.1	0:3.9.18-3.el9_4.6
Medium	RHSA-2023:6542	perl-HTTP-Tiny@0.076-460.el9	0:0.076-461.el9
Medium	RHSA-2026:25250	skopeo@2:1.11.2-0.1.el9	2:1.11.4-0.1.el9_2.6
Medium	RHSA-2026:3340	skopeo@2:1.11.2-0.1.el9	2:1.20.0-3.el9_7
Medium	RHSA-2023:6661	gmp@1:6.2.0-10.el9	1:6.2.0-13.el9
Medium	GHSA-mvff-h3cj-wj9c	github.com/containerd/containerd@v1.5.1	1.5.9
Medium	RHBA-2024:2518	expat@2.5.0-1.el9	0:2.5.0-2.el9_4
Medium	RHSA-2024:1530	expat@2.5.0-1.el9	0:2.5.0-1.el9_3.1
Medium	RHSA-2024:3926	expat@2.5.0-1.el9	0:2.5.0-1.el9_2.1
Medium	GHSA-xrjj-mj9h-534m	golang.org/x/net@v0.0.0-20211208012354-db4efeb81f4b	0.4.0
Medium	RHSA-2024:9098	skopeo@2:1.11.2-0.1.el9	2:1.16.1-1.el9
Medium	RHSA-2024:5643	krb5@1.20.1-9.el9_2	0:1.20.1-9.el9_2.1
Medium	RHSA-2024:6166	krb5@1.20.1-9.el9_2	0:1.21.1-2.el9_4
Medium	GHSA-2m4x-4q9j-w97g	github.com/open-policy-agent/opa@v0.40.0	0.42.0
Medium	RHSA-2026:20612	gnutls@3.7.6-21.el9_2	0:3.8.10-4.el9_8
Medium	RHSA-2026:41921	gnutls@3.7.6-21.el9_2	0:3.7.6-21.el9_2.7
Medium	GHSA-6wvf-f2vw-3425	github.com/containers/image/v5@v5.15.0	5.29.3
Medium	RHSA-2024:6754	expat@2.5.0-1.el9	0:2.5.0-2.el9_4.1
Medium	RHSA-2025:8181	openldap@2.6.2-3.el9	0:2.6.2-3.el9_2.1
Medium	RHSA-2024:0533	gnutls@3.7.6-21.el9_2	0:3.7.6-23.el9_3.3
Medium	RHSA-2024:1082	gnutls@3.7.6-21.el9_2	0:3.7.6-21.el9_2.2
Medium	RHSA-2025:0925	bzip2@1.0.8-8.el9	0:1.0.8-10.el9_5
Medium	GHSA-j8r2-6x86-q33q	requests@2.25.1	2.31.0
Medium	RHSA-2023:7762	skopeo@2:1.11.2-0.1.el9	2:1.13.3-3.el9_3
Medium	GHSA-69ch-w2m2-3vjp	golang.org/x/text@v0.3.7	0.3.8
Medium	RHSA-2024:4502	skopeo@2:1.11.2-0.1.el9	2:1.14.3-3.el9_4
Medium	PYSEC-2023-192	urllib3@1.26.5	2.0.6
Medium	GO-2022-0433	stdlib@go1.17.6	1.17.9
Medium	GHSA-f524-rf33-2jjr	github.com/open-policy-agent/opa@v0.40.0	0.43.1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.2latest	—	1.1.x	1217131445	8,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/redhat-trusted-application-pipeline.svg)](https://charts.stackradar.io/charts/openshift/redhat-trusted-application-pipeline)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.