Wiz introduces WizOS Helm charts to secure Kubernetes supply chains

Wiz has introduced WizOS Helm charts to address security gaps in the Kubernetes software supply chain. While Helm allows for repeatable and scalable application installs, using community charts often relies on implicit trust in third-party maintainers.

Traditional security tools, such as software composition analysis (SCA) and container image scanning, often fail to cover the risks introduced by Helm charts. These tools typically focus on code owned by the user, whereas community charts may pull images from external registries that bypass internal repositories.

Key vulnerabilities identified include the use of moving image tags rather than fixed digests, which can lead to different images being pulled over time, and risks associated with upstream dependencies and maintainer CI workflows that may not be captured by standard CVE scanning.