Helm Chart Security

Risk Areas

Risk	Description
Vulnerable dependencies	Charts include external libraries and base images that may contain known vulnerabilities
Unsecured values	Secrets stored as plaintext in `values.yaml` or checked into source control
Insecure configuration	Misconfigured RBAC, missing security contexts, permissive network policies
Supply chain attacks	Tampered or malicious chart versions pulled from untrusted repositories
Lack of visibility	Complex deployments without adequate logging and monitoring

Regularly review the dependencies array in Chart.yaml
Check upstream producers for vulnerability disclosures
Update dependencies with helm dependency update path/to/chart
No known SCA tool scans Helm chart dependencies directly; manual review is required