istiod Helm chart
quench-istiodVerified publisherScored 14 Sept 2026
Istio's control plane (istiod): xDS discovery server, certificate authority and namespace-scoped mesh configuration, packaged from a from-source, nonroot, 0-CVE QuenchWorks image pinned by digest. This chart ships the CONTROL PLANE ONLY: the Istio data-plane proxy (proxyv2) is built from Istio's own Bazel/clang Envoy fork and is not part of the QuenchWorks catalog yet, so pair this istiod with upstream proxy images or wait for the QuenchWorks data plane.
Latest 0.0.1app version 1.30.4 (not verified against the render) 0Artifact Hub
istiod 0.0.1 deploys 1 container image: ghcr.io/quenchworks/images/istiod. Across them, 4 findings — 0 critical, 0 high. The highest contribution is GHSA-2v4p-qf9q-27wj in google.golang.org/grpc v1.83.1, fixed in 1.83.2.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| ghcr.io/ | digest-pinned | 0004 | 24 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Low findings
Low: findings whose contribution to the Radar Score is 1–14. Show every band
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | GHSA-2v4p-qf9q-27wj | google.golang.org/ | 1.83.2 |
| Low | GO-2026-6355 | golang.org/ | 0.56.0 |
| Low | GO-2026-6354 | golang.org/ | 0.56.0 |
| Low | GO-2026-5932 | golang.org/ | no fix listed |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.