Automic Vault

brew package intelligence

helm

Automic Vault tracks helm because plain text chart repository credentials matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about helm

Kubernetes package manager

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text Chart Repository Credentials

Helm repositories.yaml entries can contain plaintext repository passwords and client key references. Our isotope stores that repository config in the macOS keychain and exposes it through a temporary HELM_REPOSITORY_CONFIG only while `helm` runs.

Local README excerpt

helm Radioisotope

Helm stores chart repository credentials in repositories.yaml. Entries can contain plaintext usernames, passwords, and client key file references.

This radioisotope migrates the repository config into the Automic Vault keychain and wraps helm so HELM_REPOSITORY_CONFIG points at a temporary copy only while Helm is running.

Caveats

  • We currently migrate Helm repository credentials only.
  • OCI registry credentials in Helm's registry config are not migrated yet.
  • Explicit --repository-config arguments bypass the temporary config.

Source: data/radioisotopes/helm/README.md

Caveats

  • We currently migrate Helm repository credentials only.
  • OCI registry credentials in Helm's registry config are not migrated yet.
  • Explicit --repository-config arguments bypass the temporary config.

install metadata

Resolver facts

Package keybrew:helm
Last updated2026-05-14T05:34:48Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest