StackRadar

redhat-trusted-application-pipeline Helm chart

openshift

Scored 14 Sept 2026

A Helm chart for deploying Red Hat Trusted Application Pipeline

Latest 1.0.2app version 1.1.x (not verified against the render) 0Artifact Hub

redhat-trusted-application-pipeline 1.0.2 deploys 2 container images: registry.redhat.io/openshift4/ose-tools-rhel8 and quay.io/redhat-appstudio/appstudio-utils. Across the 1 measured, 605 findings12 critical, 17 high 6 on CISA KEV. The highest contribution is RHSA-2024:3339 in glibc 2.34-60.el9, fixed in 0:2.34-100.el9_4.2. Chart.yaml declares kubeVersion >= 1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

8,5991217131445

605 findings over 1 of 2 images measured

KEV ×6 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images
ImageTagVulnerabilitiesRadar Score
registry.redhat.io/openshift4/ose-tools-rhel8×5latestunmeasured
quay.io/redhat-appstudio/appstudio-utilsdbbdd82734232e6289e8fbae5b4c858481a7c05712171314458,599

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Medium findings

131 distinct across the version’s images

Medium: findings whose contribution to the Radar Score is 15–39. Show every band

SeverityAdvisoryPackageFixed in
MediumGHSA-6wrf-mxfj-pf5pgithub.com/docker/docker@v20.10.8+incompatible20.10.24
MediumGHSA-f5wc-c3c7-36mcgolang.org/x/crypto@v0.0.0-20220131195533-30dcbda588380.52.0
MediumRHSA-2026:6620vim@2:8.2.2637-20.el9_12:8.2.2637-20.el9_2.1
MediumRHSA-2026:8259vim@2:8.2.2637-20.el9_12:8.2.2637-23.el9_7.2
MediumRHSA-2023:6679curl@7.76.1-23.el9_2.20:7.76.1-26.el9
MediumGHSA-2h5h-59f5-c5x9github.com/sigstore/rekor@v0.5.01.1.1
MediumGHSA-p782-xgp4-8hr8golang.org/x/sys@v0.0.0-20210616094352-59db8d763f220.0.0-20220412211240-33da011f77ad
MediumRHSA-2023:6698ncurses@6.2-8.20210508.el90:6.2-10.20210508.el9
MediumGHSA-pc3f-x583-g7j2github.com/moby/spdystream@v0.2.00.5.1
MediumRHSA-2025:11140glib2@2.68.4-6.el90:2.68.4-16.el9_6.2
MediumRHSA-2025:11373glib2@2.68.4-6.el90:2.68.4-7.el9_2.2
MediumRHBA-2024:5691ca-certificates@2023.2.60_v7.0.306-90.1.el9_20:2024.2.69_v8.0.303-91.4.el9_4
MediumGHSA-4f99-4q7p-p3ghgithub.com/sirupsen/logrus@v1.8.11.8.3
MediumRHSA-2024:2549skopeo@2:1.11.2-0.1.el92:1.14.3-2.el9_4
MediumRHSA-2024:6163python3.9@3.9.16-1.el9_2.10:3.9.18-3.el9_4.5
MediumRHSA-2024:3513less@590-2.el9_20:590-4.el9_4
MediumGHSA-hqxw-f8mx-cpmwgithub.com/docker/distribution@v2.7.1+incompatible2.8.2-beta.1
MediumGHSA-rm3j-f69w-wqmqgolang.org/x/crypto@v0.0.0-20220131195533-30dcbda588380.52.0
MediumRHBA-2024:2413glibc@2.34-60.el90:2.34-100.el9
MediumGHSA-hcg3-q754-cr77golang.org/x/crypto@v0.0.0-20220131195533-30dcbda588380.35.0
MediumRHSA-2026:28254libxml2@2.9.13-3.el9_2.10:2.9.13-14.el9_8.1
MediumRHSA-2024:3846python-idna@2.10-7.el90:2.10-7.el9_4.1
MediumRHSA-2024:0454python3.9@3.9.16-1.el9_2.10:3.9.16-1.el9_2.3
MediumRHSA-2023:6372gdb@10.2-10.el90:10.2-11.el9
MediumRHSA-2024:1692less@590-2.el9_20:590-3.el9_3
MediumGHSA-v95c-p5hm-xq8fgithub.com/opencontainers/runc@v1.0.11.0.3
MediumGO-2022-1144stdlib@go1.18.11.18.9
MediumGHSA-6v2p-p543-phr9golang.org/x/oauth2@v0.0.0-20211104180415-d3ed0bb246c80.27.0
MediumRHSA-2025:16116gnutls@3.7.6-21.el9_20:3.8.3-6.el9_6.2
MediumRHSA-2025:17361gnutls@3.7.6-21.el9_20:3.7.6-21.el9_2.4
MediumRHSA-2026:22312openssl@1:3.0.7-17.el9_21:3.5.5-3.el9_8

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
1.0.2latest1.1.x12171314458,599

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/openshift/redhat-trusted-application-pipeline.svg)](https://charts.stackradar.io/charts/openshift/redhat-trusted-application-pipeline)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 8 Sept 2026 · scanned 14 Sept 2026 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.