pvharmo2/gha-lab-8aba6b05dcSecurity-research lab reproducing CVE-2026-45132 (pwn request via pull_request_target chart-name injection in generate-schema.yaml) — snapshot of CloudPirates-io/helm-charts @ 9f5a7186
Automated research artifact — not the upstream project.
This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of
CloudPirates-io/helm-chartsat commit9f5a7186b46070ceae3e80740ab64955b88fc65a(2026-04-27), redistributed under that project's own licence, whose file is included unchanged in this snapshot.The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-04-27; see
pinning.mdin the harness output for every change made to the snapshot.Questions or objections: [email protected]
A curated collection of production-ready Helm charts for open-source cloud-native applications. This repository provides secure, well-documented, and configurable Helm charts following cloud-native best practices.
⚠️ IMPORTANT: As of April 15, 2026, all changelogs only exist in the github release description. Old changelogs are kept for the sake of backwards compatiblity.
| Chart | Description | Version |
|---|---|---|
| ClusterPirate | Client agent for the CloudPirates Managed Observability Platform to connect your Kubernetes cluster to our infrastructure |  |
| Common | A library chart for common templates and helper functions |  |
| Etcd | A distributed reliable key-value store |  |
| Ghost | A simple, powerful publishing platform that allows you to share your stories with the world. |  |
| Keycloak | Open Source Identity and Access Management solution |  |
| MariaDB |
# From Docker Hub registry
helm install my-release oci://registry-1.docker.io/cloudpirates/<chartname>
# From GitHub Container Registry (GHCR)
helm install my-release oci://ghcr.io/cloudpirates-io/helm-charts/<chartname>
# From local clone
helm install my-release ./charts/<chart-name>
All charts in this repository provide:
Each chart provides extensive configuration options through values.yaml. Key configuration areas include:
Refer to individual chart READMEs for detailed configuration options.
Want to contribute? Awesome! The most basic way to show your support is to star the project, or to raise issues.
⚠️ IMPORTANT: As of January 22, 2026, all commits must be signed and verified. PRs with unsigned commits will not be merged.
If you want to open a PR, read our contributing guidelines for information about setting up your environment and instructions on the signature verification that we require.
Chat with us and the community on our Discord server!
Everyone is welcome, wether you have a question, need help with a chart, want to contribute, know what's coming next or just have a talk with us.
This project is built and maintained by our growing community of contributors!
Made with contrib.rocks.
For issues specific to these Helm charts:
| High-performance, open-source relational database server that is a drop-in replacement for MySQL |
 |
| Memcached | High-performance, distributed memory object caching system |  |
| MinIO | High-Performance Object Storage compatible with Amazon S3 APIs |  |
| MongoDB | MongoDB a flexible NoSQL database for scalable, real-time data management |  |
| Nginx | High-performance HTTP server and reverse proxy |  |
| PostgreSQL | The World's Most Advanced Open Source Relational Database |  |
| RabbitMQ | A messaging broker that implements the Advanced Message Queuing Protocol (AMQP) |  |
| RabbitMQ Cluster Operator | Kubernetes operator to deploy and manage RabbitMQ clusters |  |
| Redis | In-memory data structure store, used as a database, cache, and message broker |  |
| RustFS | High-performance distributed object storage with S3-compatible API (MinIO alternative) [ALPHA] |  |
| TimescaleDB | TimescaleDB is a PostgreSQL extension for high-performance real-time analytics on time-series and event data |  |
| Valkey | High-performance in-memory data structure store, fork of Redis |  |
| Zookeeper | Centralized service for maintaining configuration information, naming, providing distributed synchronization, and group services |  |