StackRadar

buildkit 0.1.5 Helm chart

somaz94Verified publisher

Scored 13 Oct 2026

Standalone BuildKit StatefulSet — moby/buildkit pod (rootful, privileged) with optional CA-bundle Secret + optional buildkitd.toml ConfigMap, cache PVC via volumeClaimTemplates, ClusterIP Service on TCP 1234. Suits dev/staging container builds where ephemeral buildx builders fail to verify a self-signed registry's OAuth token endpoint — bake the registry CA into the BuildKit pod's trust store so multi-arch buildx (kubernetes/remote driver) succeeds. NetworkPolicy, ServiceAccount, kubernetesExtra escape hatch.

Version 0.1.5 yesterdayapp version v0.34.0 0Artifact Hub

buildkit 0.1.5 deploys 1 container image: moby/buildkit. Across them, 54 findings — 0 critical, 0 high. The highest contribution is GO-2026-5026 in stdlib go1.25.7, fixed in 1.25.13. Chart.yaml declares kubeVersion >=1.25.0-0; rendered for Kubernetes 1.25.0.

Radar Score

60600648

54 findings over 1 of 1 images measured

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image
ImageTagVulnerabilitiesRadar Score
moby/buildkitv0.34.000648606

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

54 distinct across the version’s images
SeverityAdvisoryPackageFixed in
MediumGO-2026-5026stdlib@go1.25.71.25.13
MediumGO-2026-6604stdlib@go1.25.71.26.9
MediumGO-2026-6612golang.org/x/net@v0.55.00.60.0
MediumGO-2026-6612stdlib@go1.25.71.26.9
MediumGO-2026-4601stdlib@go1.25.71.25.8
MediumGO-2026-4981stdlib@go1.25.71.25.10
LowGO-2026-4977stdlib@go1.25.71.25.10
LowGO-2026-4986stdlib@go1.25.71.25.10
LowGO-2026-4918stdlib@go1.25.71.25.10
LowGO-2026-4870stdlib@go1.25.71.25.9
LowGO-2026-4971stdlib@go1.25.71.25.10
LowGO-2026-4947stdlib@go1.25.71.25.9
LowGO-2026-5037stdlib@go1.25.71.25.11
LowGO-2026-6603stdlib@go1.25.71.26.9
LowGO-2026-6603golang.org/x/net@v0.55.00.60.0
LowGO-2026-5972stdlib@go1.25.71.25.13
LowGO-2026-6088stdlib@go1.25.71.25.13
LowGO-2026-6089stdlib@go1.25.71.25.13
LowGO-2026-6090stdlib@go1.25.71.25.13
LowGO-2026-6611stdlib@go1.25.71.26.9
LowGO-2026-6611golang.org/x/net@v0.55.00.60.0
LowGO-2026-5038stdlib@go1.25.71.25.11
LowGO-2026-6218stdlib@go1.25.71.25.13
LowGO-2026-5942golang.org/x/net@v0.55.00.56.0
LowALPINE-CVE-2026-85091zlib@1.3.2-r01.3.2-r1
LowGO-2026-6608stdlib@go1.25.71.26.9
LowGO-2026-6607stdlib@go1.25.71.26.9
LowGO-2026-6609stdlib@go1.25.71.26.9
LowGHSA-hfg8-hc9c-6c3hgithub.com/moby/go-archive@v0.2.00.3.0
LowGO-2026-4946stdlib@go1.25.71.25.9
LowGO-2026-6613stdlib@go1.25.71.26.9
LowGO-2026-6605stdlib@go1.25.71.26.9
LowGO-2026-6610stdlib@go1.25.71.26.9
LowGO-2026-6610golang.org/x/net@v0.55.00.60.0
LowGO-2026-4970stdlib@go1.25.71.25.12
LowGO-2026-4980stdlib@go1.25.71.25.10
LowGO-2026-4603stdlib@go1.25.71.25.8
LowGO-2026-4864stdlib@go1.25.71.25.9
LowGO-2026-4865stdlib@go1.25.71.25.9
LowGO-2026-4982stdlib@go1.25.71.25.10
LowGO-2026-6091stdlib@go1.25.71.25.13
LowGO-2026-4976stdlib@go1.25.71.25.10
LowGO-2026-5039stdlib@go1.25.71.25.11
LowGO-2026-5856stdlib@go1.25.71.25.12
LowGO-2026-4869stdlib@go1.25.71.25.9
LowGO-2026-6599stdlib@go1.25.71.26.9
LowGO-2026-6600stdlib@go1.25.71.26.9
LowGO-2026-6617stdlib@go1.25.71.26.9
LowGO-2026-6617golang.org/x/net@v0.55.00.60.0
LowGO-2026-6238github.com/cilium/ebpf@v0.17.30.22.0

Indexed versions

VersionPublishedApp versionVulnerabilitiesRadar Score
0.1.5latestyesterdayv0.34.000648606
0.1.41 month agov0.33.00015831,168

The latest version and the previous major, as selected nightly from the repository’s index.

README badge
[![Radar Score](https://charts.stackradar.io/badge/somaz94/buildkit.svg)](https://charts.stackradar.io/charts/somaz94/buildkit)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.

helm v3.16.4 · syft 1.42.1 · rendered 13 Oct 2026 · scanned 13 Oct 2026 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.