Skip to content

feat(engine): add Helm fixer, values overrides, and container image BoM export - #8153

Open
MabsIPCA wants to merge 3 commits into
Checkmarx:masterfrom
MabsIPCA:master
Open

MabsIPCA wants to merge 3 commits into
Checkmarx:masterfrom
MabsIPCA:master

Conversation

@MabsIPCA

@MabsIPCA MabsIPCA commented Oct 25, 2026 •

Copy link
Copy Markdown

Reason for Proposed Changes

• Improve Helm scan coverage, support custom values, and export detected container images for downstream scanning.

Proposed Changes

• Add experimental Helm rendering with automatic fixes, values combinations, improved dependency fetching, and execution contexts.
• Support global and per-chart values through config and CLI, preserving explicit overrides during fixes.
• Add --image-bom to export a CycloneDX image inventory with source provenance.
• Fix chart traversal, virtual-file handling, and query counters; add documentation and unit/E2E coverage.

I submit this contribution under the Apache-2.0 license.

@MabsIPCA
MabsIPCA requested a review from a team October 25, 2026 00:06
@MabsIPCA
MabsIPCA force-pushed the master branch 2 times, most recently from 58ac895 to 974c2b9 Compare October 25, 2026 12:30

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant