All Public RunWhen Helm Charts
The runwhen-local helm chart is responsible for installing all client-side components into a Kuberetes cluster. These components perform:
- automatic resource discovery
- automatic configuration (tailoring open source automation tasks for all discovered resources)
- frequent sync/upload of resources and configurations to the RunWhen Platform
- private execution of health and troubleshooting tasks (via. alerts, Engineering Assistatents, or on-demand)
Security scans regularly run against all images used by this helm chart using trivy, scanning for CRITICAL and HIGH vulnerabilities that are fixable.
trivy image --severity CRITICAL,HIGH --ignore-unfixed --scanners vuln --format json "$registry" > trivy_result.json
Registry Package Vulnerability ID Installed Version Fixed Version Severity
-------- ------- ---------------- ----------------- ------------- --------
ghcr.io/runwhen-contrib/runwhen-local:latest stdlib CVE-2025-22874 v1.24.1 1.24.4 HIGH
ghcr.io/runwhen-contrib/runwhen-local:latest stdlib CVE-2025-47906 v1.23.11 1.23.12, 1.24.6 HIGH
ghcr.io/runwhen-contrib/runwhen-local:latest stdlib CVE-2025-47906 v1.24.1 1.23.12, 1.24.6 HIGH
ghcr.io/runwhen-contrib/runwhen-local:latest stdlib CVE-2025-47907 v1.23.11 1.23.12, 1.24.6 HIGH
ghcr.io/runwhen-contrib/runwhen-local:latest stdlib CVE-2025-47907 v1.24.1 1.23.12, 1.24.6 HIGH
otel/opentelemetry-collector:0.127.0 stdlib CVE-2025-22874 v1.24.3 1.24.4 HIGH
otel/opentelemetry-collector:0.127.0 stdlib CVE-2025-47906 v1.24.3 1.23.12, 1.24.6 HIGH
otel/opentelemetry-collector:0.127.0 stdlib CVE-2025-47907 v1.24.3 1.23.12, 1.24.6 HIGH
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner:latest golang.org/x/oauth2 CVE-2025-22868 v0.24.0 0.27.0 HIGH
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner:latest golang.org/x/crypto CVE-2025-22869 v0.31.0 0.35.0 HIGH
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner:latest stdlib CVE-2025-47906 v1.24.5 1.23.12, 1.24.6 HIGH
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner:latest stdlib CVE-2025-47907 v1.24.5 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest golang.org/x/oauth2 CVE-2025-22868 v0.10.0 0.27.0 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest golang.org/x/oauth2 CVE-2025-22868 v0.23.0 0.27.0 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest github.com/golang-jwt/jwt/v4 CVE-2025-30204 v4.5.1 4.5.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest github.com/golang-jwt/jwt/v5 CVE-2025-30204 v5.2.1 5.2.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest protobuf CVE-2025-4565 5.29.4 4.25.8, 5.29.5, 6.31.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest setuptools CVE-2025-47273 75.8.0 78.1.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.23.1 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.23.4 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.23.6 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.23.7 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.23.1 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.23.4 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.23.6 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.23.7 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest helm.sh/helm/v3 CVE-2025-53547 v3.17.0 3.18.4, 3.17.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest istio.io/istio CVE-2019-14993 v0.0.0-20250808040725-7359d8be2504+dirty 1.1.13, 1.2.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest istio.io/istio CVE-2021-39155 v0.0.0-20250808040725-7359d8be2504+dirty 1.9.8, 1.10.4, 1.11.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest istio.io/istio CVE-2021-39156 v0.0.0-20250808040725-7359d8be2504+dirty 1.9.8, 1.10.4, 1.11.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2021-41771 v1.17.1 1.16.10, 1.17.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2021-41772 v1.17.1 1.16.10, 1.17.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2021-44716 v1.17.1 1.16.12, 1.17.5 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest istio.io/istio CVE-2022-23635 v0.0.0-20250808040725-7359d8be2504+dirty 1.13.1, 1.12.4, 1.11.7 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-23772 v1.17.1 1.16.14, 1.17.7 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-23806 v1.17.1 1.16.14, 1.17.7 CRITICAL
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-24675 v1.17.1 1.17.9, 1.18.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-24921 v1.17.1 1.16.15, 1.17.8 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-27664 v1.17.1 1.18.6, 1.19.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-28131 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-28327 v1.17.1 1.17.9, 1.18.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-2879 v1.17.1 1.18.7, 1.19.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-2880 v1.17.1 1.18.7, 1.19.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-29804 v1.17.1 1.17.11, 1.18.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30580 v1.17.1 1.17.11, 1.18.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30630 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30631 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30632 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30633 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30634 v1.17.1 1.17.11, 1.18.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-30635 v1.17.1 1.17.12, 1.18.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-32189 v1.17.1 1.17.13, 1.18.5 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41715 v1.17.1 1.18.7, 1.19.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41716 v1.17.1 1.18.8, 1.19.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41720 v1.17.1 1.18.9, 1.19.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41722 v1.17.1 1.19.6, 1.20.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41723 v1.17.1 1.19.6, 1.20.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41724 v1.17.1 1.19.6, 1.20.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2022-41725 v1.17.1 1.19.6, 1.20.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24534 v1.17.1 1.19.8, 1.20.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24536 v1.17.1 1.19.8, 1.20.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24537 v1.17.1 1.19.8, 1.20.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24538 v1.17.1 1.19.8, 1.20.3 CRITICAL
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24539 v1.17.1 1.19.9, 1.20.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-24540 v1.17.1 1.19.9, 1.20.4 CRITICAL
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-29400 v1.17.1 1.19.9, 1.20.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-29403 v1.17.1 1.19.10, 1.20.5 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-39325 v1.17.1 1.20.10, 1.21.3 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-45283 v1.17.1 1.20.11, 1.21.4, 1.20.12, 1.21.5 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-45287 v1.17.1 1.20.0 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2023-45288 v1.17.1 1.21.9, 1.22.2 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2024-24790 v1.17.1 1.21.11, 1.22.4 CRITICAL
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2024-34156 v1.17.1 1.22.7, 1.23.1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.17.1 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2025-47906 v1.24.4 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.17.1 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest stdlib CVE-2025-47907 v1.24.4 1.23.12, 1.24.6 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest git CVE-2025-48384 1:2.47.2-0.2 1:2.47.3-0+deb13u1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest git-man CVE-2025-48384 1:2.47.2-0.2 1:2.47.3-0+deb13u1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest git CVE-2025-48385 1:2.47.2-0.2 1:2.47.3-0+deb13u1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest git-man CVE-2025-48385 1:2.47.2-0.2 1:2.47.3-0+deb13u1 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest helm.sh/helm/v3 CVE-2025-53547 v3.17.3 3.18.4, 3.17.4 HIGH
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest libpcre2-8-0 CVE-2025-58050 10.45-1 10.46-1~deb13u1 CRITICAL
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest libpcre2-posix3 CVE-2025-58050 10.45-1 10.46-1~deb13u1 CRITICAL
Below, you can find the list of images that were scanned and may be utilized while executing Tasks securely in your infrastructure.
ghcr.io/runwhen-contrib/runwhen-local:latest
otel/opentelemetry-collector:0.127.0
us-docker.pkg.dev/runwhen-nonprod-shared/public-images/runner:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-aws-c7n-codecollection-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-azure-c7n-codecollection-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-rw-cli-codecollection-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-rw-generic-codecollection-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-rw-public-codecollection-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-rw-workspace-utils-main:latest
us-west1-docker.pkg.dev/runwhen-nonprod-beta/public-images/runwhen-contrib-ternary-codecollection-main:latest