Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts

What it is

A Wiz Research supply-chain audit of the source repos behind 1,500 popular Artifact Hub Helm charts, packaged with a promotion for WizOS Helm Charts. The summary already carries the top-line numbers and the two disclosed findings' mechanisms; what it omits are the pattern names, the fix boundary, and the self-check these imply.

How it works — the two named patterns

The findings generalize into two classes an engineer can audit for in their own charts, regardless of WizOS:

• PWN Request. A GitHub Actions workflow triggered by an outsider's PR or issue comment checks out and runs the outsider's fork code with access to repo secrets / a push-capable token. Meilisearch's meilisearch-kubernetes repo hit this, compounded by script injection (fork branch name placed directly into a shell command) and a missing author-association check. Net result: any GitHub user could run commands with push access.
• Unowned dependency. A manifest references a namespace/account that doesn't exist, so anyone can register it and publish malicious code into builds. KubeView's go.mod pointed at a nonexistent GitHub username.

Affected / fix boundary

• KubeView: dependency removed in version 2.2.1 (summary does not give this). Upgrade past 2.2.0.
• Meilisearch: workflow fixed; both fixed "within days."
• Scope of the study: 61/814 repos (7.5%) had confirmed risk; 9 rated critical or high.

What to do

For charts you run, look one layer down at the producing repo: grep workflows for issue_comment/pull_request_target triggers that check out fork code with secrets and lack author_association gating, and check dependency manifests for nonexistent namespaces. The chart itself looks clean in both cases — scanning your own code won't surface either.

Caveats

Everything past the findings is vendor promotion (WizOS hardened/signed charts, Secure Architecture Opportunities page, a 7-day critical / 14-day high-medium CVE SLA). No detection tooling or queries are provided.