runwhen-local 0.6.15 Helm chart

Name: runwhen-local Helm chart 0.6.15: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

runwhen-contrib

Scored 14 Sept 2026

The RunWhen Local Helm Chart - Private runners powering Agentic AI

Version 0.6.15 12 days agoapp version 0.11.13 0Artifact Hub

runwhen-local 0.6.15 deploys 3 container images: otel/opentelemetry-collector, us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner and ghcr.io/runwhen-contrib/runwhen-local. Across the 2 measured, 472 findings — 0 critical, 3 high — 1 on CISA KEV. The highest contribution is GHSA-86qp-5c8j-p5mr in starlette 0.46.2, fixed in 1.0.1.

Radar Score

4,6450348420

472 findings over 2 of 3 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

3 images

Image	Tag	Vulnerabilities	Radar Score
otel/opentelemetry-collector	0.153.0	00029	202
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner	2026-07-29.1	—	unmeasured
ghcr.io/runwhen-contrib/runwhen-local	0.11.13	0348391	4,443

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

447 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Low	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto@v0.14.0	0.45.0
Low	DEBIAN-CVE-2026-58042	nodejs@26.8.1-1nodesource1	no fix listed
Low	DEBIAN-CVE-2026-43961	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-18924	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-78mq-xcr3-xm33	golang.org/x/crypto@v0.14.0	0.52.0
Low	GO-2024-2599	stdlib@go1.21.1	1.21.8
Low	GO-2024-3106	stdlib@go1.21.1	1.22.7
Low	DEBIAN-CVE-2022-0563	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-57456	vim@2:9.1.1230-2	no fix listed
Low	GHSA-hrxh-6v49-42gf	google.golang.org/grpc@v1.81.1	1.82.1
Low	DEBIAN-CVE-2025-15367	python3.13@3.13.5-2+deb13u4	no fix listed
Low	GHSA-xhr3-wf7j-h255	github.com/gomarkdown/markdown@v0.0.0-20231222211730-1d6d20845b47	0.0.0-20240729212818-a2a9c4f76ef5
Low	GO-2024-3107	stdlib@go1.21.1	1.22.7
Low	GO-2024-2609	stdlib@go1.21.1	1.21.8
Low	DEBIAN-CVE-2026-42307	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-59858	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-3184	util-linux@2.41.5-0+deb13u1	no fix listed
Low	GHSA-3rp5-jjmw-4wv2	gitpython@3.1.50	3.1.53
Low	DEBIAN-CVE-2017-1000382	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-25749	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2026-58055	nghttp2@1.64.0-1.1+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-7010	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-19487	perl@5.40.1-6	no fix listed
Low	DEBIAN-CVE-2026-5704	tar@1.35+dfsg-3.1	no fix listed
Low	GHSA-9m57-25v3-79x9	golang.org/x/crypto@v0.14.0	0.52.0
Low	GHSA-pq67-6m6q-mj2v	urllib3@2.3.0	2.5.0
Low	DEBIAN-CVE-2011-3374	apt@3.0.3	no fix listed
Low	GHSA-x86f-5xw2-fm2r	github.com/docker/docker@v27.1.1+incompatible	no fix listed
Low	GHSA-7833-fr7j-v32q	gitpython@3.1.50	3.1.59
Low	DEBIAN-CVE-2026-55693	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2013-4392	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2023-2186	stdlib@go1.21.1	1.20.11
Low	DEBIAN-CVE-2026-57455	vim@2:9.1.1230-2	no fix listed
Low	GO-2024-3333	golang.org/x/net@v0.17.0	0.33.0
Low	DEBIAN-CVE-2026-78408	util-linux@2.41.5-0+deb13u1	no fix listed
Low	DEBIAN-CVE-2026-82209	curl@8.14.1-2+deb13u4	no fix listed
Low	GHSA-2464-8j7c-4cjm	github.com/go-viper/mapstructure/v2@v2.0.0-alpha.1	2.4.0
Low	GO-2024-3105	stdlib@go1.21.1	1.22.7
Low	DEBIAN-CVE-2026-73073	vim@2:9.1.1230-2	no fix listed
Low	DEBIAN-CVE-2025-53906	vim@2:9.1.1230-2	no fix listed
Low	GO-2026-4981	stdlib@go1.25.5	1.25.10
Low	DEBIAN-CVE-2023-31439	systemd@257.13-1~deb13u1	no fix listed
Low	GO-2025-3563	stdlib@go1.21.1	1.23.8
Low	GHSA-48p4-8xcf-vxj5	urllib3@2.3.0	2.5.0
Low	DEBIAN-CVE-2026-76957	expat@2.8.3-1~deb13u1	no fix listed
Low	GO-2026-4977	stdlib@go1.25.5	1.25.10
Low	GO-2024-2610	stdlib@go1.21.1	1.21.8
Low	DEBIAN-CVE-2023-31437	systemd@257.13-1~deb13u1	no fix listed
Low	DEBIAN-CVE-2026-16599	wget@1.25.0-2	no fix listed
Low	GO-2026-4986	stdlib@go1.25.5	1.25.10

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.17latest	3 days ago	0.12.0	0140336	3,707
0.6.16	4 days ago	0.12.0	0140336	3,707
0.6.15	12 days ago	0.11.13	0348420	4,645

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/runwhen-contrib/runwhen-local.svg)](https://charts.stackradar.io/charts/runwhen-contrib/runwhen-local)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.