ingress-stack 0.0.2 Helm chart

Name: ingress-stack Helm chart 0.0.2: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

quench-ingress-stack

Scored 12 Oct 2026

Hardened ingress with TLS out of the box: ingress-nginx as the default IngressClass and cert-manager with a cluster CA issuer the stack creates, so an Ingress gets a certificate from a single annotation. Bring your own ACME issuer for public certificates. All QuenchWorks images are nonroot, 0-CVE, pinned by digest and cosign-signed.

Version 0.0.2app version 1.0.0 (not verified against the render) 0Artifact Hub

ingress-stack 0.0.2 deploys 5 container images: ghcr.io/quenchworks/images/cert-manager-cainjector, ghcr.io/quenchworks/images/cert-manager-controller, ghcr.io/quenchworks/images/cert-manager-webhook, ghcr.io/quenchworks/images/ingress-nginx and 1 more. Across them, 112 findings — 2 critical, 3 high. The highest contribution is GO-2025-3567 in k8s.io/ingress-nginx v1.15.10+dirty, with no fix listed.

Radar Score

1,399231493

112 findings over 5 of 5 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

5 images

Image	Tag	Vulnerabilities	Radar Score
ghcr.io/quenchworks/images/cert-manager-cainjector	digest-pinned	0001	4
ghcr.io/quenchworks/images/cert-manager-controller	digest-pinned	0001	4
ghcr.io/quenchworks/images/cert-manager-webhook	digest-pinned	0001	4
ghcr.io/quenchworks/images/ingress-nginx×2	digest-pinned	23641	839
ghcr.io/quenchworks/images/kubectl	digest-pinned	00849	548

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

86 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	CGA-5ff5-5vw4-4gx8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-5mg5-hvq2-8763	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-4653-rw6m-872g	helm-4@4.3.0-r0	4.3.0-r2
Low	CGA-4h9w-grf4-6jpp	kubernetes-1.37@1.37.1-r0	1.37.1-r2
Low	CGA-5c9p-v2mf-px8q	ingress-nginx-controller-1.15@1.15.10-r3	1.15.10-r8
Low	CGA-98rx-6p2c-qw5v	ingress-nginx-controller-1.15@1.15.10-r3	1.15.10-r8
Low	CGA-9hgh-r65w-7q99	ingress-nginx-controller-1.15@1.15.10-r3	1.15.10-r8
Low	GO-2026-6599	stdlib@go1.27.1	1.26.9
Low	GO-2026-6600	stdlib@go1.27.1	1.26.9
Low	GO-2026-6617	stdlib@go1.27.1	1.27.2
Low	GO-2026-6617	golang.org/x/net@v0.57.0	0.60.0
Low	CGA-9hjr-hrh5-323f	libxslt@1.1.45-r4	no fix listed
Low	CGA-3g3j-42jj-77j3	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-4gmv-8mr7-5pxx	glibc-2.44@2.44-r6	no fix listed
Low	GO-2026-4419	k8s.io/ingress-nginx@v1.15.10+dirty	no fix listed
Low	CGA-484j-x24x-cpc9	kubernetes-1.37@1.37.1-r0	no fix listed
Low	GO-2025-3547	k8s.io/kubernetes@v1.37.1+dirty	no fix listed
Low	CGA-277p-vcvg-mmrw	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-3862-v47f-8qx7	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-6mf8-9rf9-jqwc	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-6rfr-jp65-jqrq	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-7crm-jg8v-hcmw	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-7rqw-r7ww-h5pc	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-84xc-6qp9-53q8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-8p24-rg3m-6q67	helm-4@4.3.0-r0	no fix listed
Low	CGA-cmv4-xcrj-hvxq	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-cvw6-9pj6-fx5j	openssl@3.6.4-r7	no fix listed
Low	CGA-fmf5-6rqm-vg97	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-m5hm-8jx9-rvx8	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-qvvv-7fmc-7vxv	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-rw59-v8cv-vgh9	helm-4@4.3.0-r0	no fix listed
Low	CGA-w8pf-x6mg-w88p	kubernetes-1.37@1.37.1-r0	no fix listed
Low	CGA-ww43-fhm7-mff3	openssl@3.6.4-r7	no fix listed
Low	GO-2026-5932	golang.org/x/crypto@v0.56.0	no fix listed
Low	CGA-53q8-cxrp-gx53	glibc-2.44@2.44-r6	2.44-r8
Low	CGA-mv2h-3fqx-g4v8	ingress-nginx-controller-1.15@1.15.10-r3	no fix listed

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.0.6latest	—	1.0.0	23843	786
0.0.4	—	1.0.0	2320141	2,002
0.0.2	—	1.0.0	231493	1,399

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/quench-ingress-stack/ingress-stack.svg)](https://charts.stackradar.io/charts/quench-ingress-stack/ingress-stack)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.