Welcome | FAQ | Add Repo | Add Chart | Roadmap | Security Tab | Mitigation Notes | JFrog Container Registry
Attention: Deprecation Notice for Bintray, GoCenter, ChartCenter, and JCenter. Learn More
Do you have a question about ChartCenter? We have the answer!
Start by reading the inclusion guide and then making a pull request to the repos.yaml file.
First, you'll need to make sure you have downloaded Helm.
Next, you'll want to configure ChartCenter using the command helm repo add center https://repo.chartcenter.io.
Now, once you have found the chart you want to use - you can use the command helm install [ PATH ]. For example, to install the artifactory chart you use helm install center/jfrog/artifactory.
ChartCenter was populated by using the existing charts that HelmHub. Those charts are still availabe on ChartCenter, and you can see a list here: helmhub repo. Additionally, all new repos and charts are being added by chart authors for inclusion to ChartCenter. You can view all of those charts on the repos.yaml file.
First, go to the ChartCenter security tab for your chart and click on Are you a chart maintainer? on the top-left. This will open up a box that allows you to provide your email. As long as your email address is associated with the chart, your email will be activated and you can provide us mitigation notes using the [security specifications.(securitymigitationspec.md)
ChartCenter is the first central repository of Helm charts to provide free vulnerability information right in the UI. Given the various components that are bundled into a helm chart and its list dependencies, we've also built an easy way for chart maintainers to provide mitigation notes (such as issues that are being resolved in the next release and vulnerabilities that aren't directly included in the application). These notes are stored in a YAML file called security-mitigation.yaml. More information can be found here.
ChartCenter includes all chart versions and application versions, which you can see in the UI right under the chart name. Api version: v1 refers to Helm2 charts and Api version: v2 refers to Helm3 charts. Helm3 is now the standard and provides better features with the removal of Tiller. You can learn more about migrating Helm v2 to v3.
To use ChartCenter for dependency chart referencing the chartcenter-plugin needs to be used at all times in Helm v2 and v3.
There is a limit in the Helm client, the helm package doesn’t support an extra namespaces that ChartCenter added. To fix that an upstream issue has been opened for Helm v3 but after a while it was closed by Helm mainteiners.
We believe that immutability is the primary goal of ChartCenter and providing this stability is really important for the Helm community, but if you are the author of an open source Helm chart and would like to request a chart be removed, please reach out to us: [email protected]. For excluded repositories, chartcenter will just forward the request to the original source.
We’ve got a number of open issues on the public roadmap. Feel free to comment or email us at [email protected].