Skip to content

Helm

Add the Package Firewall as a Helm chart repository, and set the chart repository it fronts.

Updated 03 Nov 2026Checked against cli@4c8c3b7, package-firewall@333285f
Repository URL https://packages.vulnetix.com/helm
Ecosystem ID helm
Plan Add-on
Mode filter: index.yaml is filtered; .tgz chart downloads are checked
Cooldown yes, from each chart version’s created time
Default mirror https://evgkrsk.github.io/nxs-universal-chart

Helm repositories are per URL, and the firewall serves the first active helm mirror that answers. The seeded default is a single third-party chart repository. Set your own:

vulnetix config set package-firewall helm https://charts.example.com --priority 0
vulnetix config set package-firewall helm https://evgkrsk.github.io/nxs-universal-chart --disable

Automatic setup

vulnetix package-firewall helm

This replaces ~/.config/helm/repositories.yaml (existing file backed up to .vulnetix.bak):

apiVersion: v1
generated: "0001-01-01T00:00:00Z"
repositories:
- name: vulnetix
  url: "https://packages.vulnetix.com/helm"
  username: "YOUR_ORG_UUID"
  password: "YOUR_API_KEY"
  pass_credentials_all: true

Manual equivalent

helm repo add vulnetix https://packages.vulnetix.com/helm \
  --username "$VULNETIX_ORG_ID" --password "$VULNETIX_API_KEY" --pass-credentials

Use and verify

helm repo update
helm search repo vulnetix
helm install demo vulnetix/<chart>
Edit this pageSources: cli/pkg/packagefirewall/config.go, package-firewall/internal/ecosystem/helm/helm.go, package-firewall/internal/ecosystem/ecosystem.go, cli/cmd/config.go
esc
↑ ↓ move↵ openSearches in your browser. A key like autonomy.max or a code like threshold_required jumps straight to it.