Company news
Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
Published 1 October 2026
WHAT HAPPENED
Wiz launched WizOS Helm Charts, secured Kubernetes package charts that Wiz maintains to the same hardening standards as its base images. The launch included research on 1,500 popular Helm charts that found 61 source repositories with supply chain risks, including 9 critical or high severity findings, 20 charts with CI/CD workflow weaknesses, and 25 charts dependent on unmaintained projects.
WHO IS INVOLVED
Wiz built the secured Helm charts for WizOS, and Wiz Research examined 1,500 Helm charts on Artifact Hub that map to 814 unique GitHub repositories. The research identified specific vulnerabilities in popular charts like KubeView and Meilisearch, both of which were fixed after Wiz reported the issues.
WHY IT MATTERS
Teams installing Helm charts from public registries bypass traditional supply chain security tools because the charts pull images and dependencies from external sources that never pass through a team's repositories or pipelines. Wiz's secured charts address gaps where attackers could exploit unmaintained dependencies or manipulate CI/CD workflows to inject malicious code into deployed software.
METHODOLOGY
Wiz Research analyzed the source repositories and build pipelines behind the 1,500 charts to identify two patterns: build pipelines that allow untrusted code execution from outside contributors and dependencies pointing to unregistered or unmaintained accounts that attackers could register and populate with malicious code.
EXAMPLES
KubeView referenced a non-existent Go module that anyone could have registered to inject code into builds, and Meilisearch's CI workflow ran code from pull request commenters using a bot token with publishing access, both now remediated.
PRODUCT DETAILS
The Secured Image Catalog in Wiz displays pre-hardened Helm chart options teams can swap into their environments, maintaining consistent hardening standards across both base images and packaged applications.
- Type
- Product launch
- Category
- Cloud Security
- Source
- wiz.io ↗
See Wiz’s full company record.
Look up its funding history, investors, hiring and competitors in Mandos. Choose a platform plan, or request access to one company for free.
- Funding history and investors
- Hiring trends and departments
- Competitor comparisons
- Scores and supporting data