pvharmo2/gha-lab-5511dc3f73Authorized security-research lab reproducing CVE-2026-45131 (pwn request in .github/workflows/pull-request.yaml) — snapshot of CloudPirates-io/helm-charts @ 9f5a7186
Automated research artifact — not the upstream project.
This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of
CloudPirates-io/helm-chartsat commit9f5a7186b46070ceae3e80740ab64955b88fc65a(2026-04-27), redistributed under that project's own licence, whose file is included unchanged in this snapshot.The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-04-27; see
pinning.mdin the harness output for every change made to the snapshot.Questions or objections: [email protected]
A curated collection of production-ready Helm charts for open-source cloud-native applications. This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices.
⚠️ IMPORTANT: As of April 15, 2026, all changelogs only exist in the github release description. Old changelogs are kept for the sake of backwards compatiblity.
| Chart | Description | Version |
|---|---|---|
| ClusterPirate | Client agent for the CloudPirates Managed Observability Platform to connect your Kubernetes cluster to our infrastructure |  |
| Common | A library chart for common templates and helper functions |  |
| Etcd | A distributed reliable key-value store |  |
| Ghost | A simple, powerful publishing platform that allows you to share your stories with the world. |  |
| Keycloak | Open Source Identity and Access Management solution |  |
| MariaDB | High-performance, open-source relational database server that is a drop-in replacement for MySQL |  |
| Memcached | High-performance, distributed memory object caching system |  |
| MinIO | High-Performance Object Storage compatible with Amazon S3 APIs |  |
| MongoDB | MongoDB a flexible NoSQL database for scalable, real-time data management |  |
| Nginx | High-performance HTTP server and reverse proxy |  |
| PostgreSQL | The World's Most Advanced Open Source Relational Database |  |
