redhat-trusted-application-pipeline 1.0.2 Helm chart

Name: redhat-trusted-application-pipeline Helm chart 1.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

openshift

Scored 14 Sept 2026

A Helm chart for deploying Red Hat Trusted Application Pipeline

Version 1.0.2app version 1.1.x (not verified against the render) 0Artifact Hub

redhat-trusted-application-pipeline 1.0.2 deploys 2 container images: registry.redhat.io/openshift4/ose-tools-rhel8 and quay.io/redhat-appstudio/appstudio-utils. Across the 1 measured, 605 findings — 12 critical, 17 high — 6 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-60.el9, fixed in 0:2.34-100.el9_4.2. Chart.yaml declares kubeVersion >= 1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

8,5991217131445

605 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
registry.redhat.io/openshift4/ose-tools-rhel8×5	latest	—	unmeasured
quay.io/redhat-appstudio/appstudio-utils	dbbdd82734232e6289e8fbae5b4c858481a7c057	1217131445	8,599

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

605 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	RHSA-2026:55440	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.9
Low	RHSA-2026:65768	glib2@2.68.4-6.el9	0:2.68.4-7.el9_2.7
Low	GO-2022-0288	stdlib@go1.17.3	1.16.12
Low	GO-2022-0288	golang.org/x/net@v0.0.0-20211208012354-db4efeb81f4b	0.0.0-20211209124913-491a49abca63
Low	RHSA-2024:0452	curl@7.76.1-23.el9_2.2	0:7.76.1-23.el9_2.6
Low	RHSA-2024:0464	python-urllib3@1.26.5-3.el9	0:1.26.5-3.el9_3.1
Low	GHSA-92mm-2pjq-r785	github.com/hashicorp/go-getter@v1.5.10	1.8.6
Low	GO-2023-2102	stdlib@go1.20.8	1.20.10
Low	RHSA-2026:55439	curl@7.76.1-23.el9_2.2	0:7.76.1-40.el9_8.5
Low	RHSA-2026:13381	openssh@8.7p1-30.el9_2	0:8.7p1-49.el9_7
Low	RHSA-2026:19219	openssh@8.7p1-30.el9_2	0:9.9p1-7.el9_8
Low	RHSA-2026:22648	openssh@8.7p1-30.el9_2	0:8.7p1-30.el9_2.11
Low	RHSA-2026:28253	libtasn1@4.16.0-8.el9_1	0:4.16.0-10.el9_8
Low	RHSA-2026:42089	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.2
Low	GHSA-wjrx-6529-hcj3	github.com/hashicorp/go-getter@v1.5.10	1.7.9
Low	RHSA-2026:66366	vim@2:8.2.2637-20.el9_1	2:8.2.2637-26.el9_8.21
Low	RHSA-2024:9404	libgcrypt@1.10.0-10.el9_2	0:1.10.0-11.el9
Low	RHSA-2026:15971	glib2@2.68.4-6.el9	0:2.68.4-18.el9_7.2
Low	RHSA-2026:19361	glib2@2.68.4-6.el9	0:2.68.4-19.el9_8.1
Low	RHSA-2026:19460	glib2@2.68.4-6.el9	0:2.68.4-7.el9_2.5
Low	GHSA-qw9x-cqr3-wc7r	github.com/opencontainers/runc@v1.0.1	1.2.8
Low	GHSA-cgrx-mc8f-2prm	github.com/opencontainers/runc@v1.0.1	1.2.8
Low	GHSA-33pg-m6jh-5237	github.com/docker/docker@v20.10.8+incompatible	20.10.24
Low	RHSA-2025:7409	git@2.39.3-1.el9_2	0:2.47.1-2.el9_6
Low	RHSA-2026:38511	vim@2:8.2.2637-20.el9_1	2:8.2.2637-26.el9_8.10
Low	RHSA-2024:9541	expat@2.5.0-1.el9	0:2.5.0-3.el9_5.1
Low	RHSA-2026:19218	openssl@1:3.0.7-17.el9_2	1:3.5.5-2.el9_8
Low	RHSA-2023:6631	glib2@2.68.4-6.el9	0:2.68.4-11.el9
Low	GO-2022-0969	stdlib@go1.18.1	1.18.6
Low	RHSA-2025:10180	pam@1.5.1-14.el9	0:1.5.1-15.el9_2.1
Low	RHSA-2025:15099	pam@1.5.1-14.el9	0:1.5.1-26.el9_6
Low	RHSA-2025:23127	curl@7.76.1-23.el9_2.2	0:7.76.1-23.el9_2.8
Low	RHSA-2023:7747	libxml2@2.9.13-3.el9_2.1	0:2.9.13-5.el9_3
Low	GO-2022-0586	github.com/hashicorp/go-getter@v1.5.10	1.6.1
Low	GHSA-6m8w-jc87-6cr7	github.com/open-policy-agent/opa@v0.40.0	1.4.0
Low	RHSA-2026:52674	libarchive@3.5.3-4.el9	0:3.5.3-11.el9_8
Low	RHSA-2025:14130	libarchive@3.5.3-4.el9	0:3.5.3-6.el9_6
Low	GO-2021-0347	stdlib@go1.17.6	1.16.15
Low	GHSA-q4h4-gmj2-qvw2	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.52.0
Low	GHSA-c72p-9xmj-rx3w	github.com/containerd/containerd@v1.5.1	1.5.4
Low	GO-2021-0319	stdlib@go1.17.6	1.16.14
Low	GHSA-w879-237q-wc7r	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.52.0
Low	RHSA-2025:22175	expat@2.5.0-1.el9	0:2.5.0-5.el9_7.1
Low	GHSA-4vrq-3vrq-g6gg	github.com/moby/buildkit@v0.11.5	0.28.1
Low	RHSA-2026:28209	vim@2:8.2.2637-20.el9_1	2:8.2.2637-26.el9_8.6
Low	RHSA-2026:4168	python3.9@3.9.16-1.el9_2.1	0:3.9.25-3.el9_7.1
Low	RHSA-2026:5225	python3.9@3.9.16-1.el9_2.1	0:3.9.16-1.el9_2.12
Low	RHSA-2026:23230	expat@2.5.0-1.el9	0:2.5.0-6.el9_8.1
Low	RHSA-2025:7440	vim@2:8.2.2637-20.el9_1	2:8.2.2637-22.el9_6
Low	RHSA-2026:47756	openssh@8.7p1-30.el9_2	0:9.9p1-9.el9_8

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.0.2latest	—	1.1.x	1217131445	8,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/openshift/redhat-trusted-application-pipeline.svg)](https://charts.stackradar.io/charts/openshift/redhat-trusted-application-pipeline)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.