Hello, I am trying to deploy SonarQube server using helm charts. I noticed that the helm chart for Sonarqube is not signed and nor does it have a link to the PGP key. I am using this link to download the chart: Artifact Hub Link Would it be possible for the team maintaining the chart to add a s…

Hello @j.b thanks a lot for this feedback, this is indeed a very good feature we could implement. I’ll create a ticket to track the progress of it. Nonetheless please do not expect an ETA for now. Regards, Jérémy.

For posterity, here is that ticket: SONAR-24735

SonarQube Helm Chart PGP Signature/Provenance Layer

SonarQube Server / Community Build

jonesbusy (Valentin Delaye) May 15, 2025, 12:33pm 8

I think it’s also related to Provide helm-chart-sonarqube to OCI compatible registry

Since OCI provide a way to attach artifact together (like SBOM, attestation etc…)

Topic		Replies	Views
Provide helm-chart-sonarqube to OCI compatible registry SonarQube Server / Community Build helm	2	185	September 3, 2026
Helm chart manage by sonarqube Suggest new features	4	4316	May 6, 2021
Does SonarQube support helm charts scan? SonarQube Server / Community Build	6	4284	November 15, 2024
Can the SonarQube Helm chart from this GitHub repository be used in a production environment SonarQube Server / Community Build	1	234	October 23, 2023
Sonarqube Helm Chart with Developer Edition SonarQube Server / Community Build sonarqube , scanner	2	1480	August 30, 2022

SonarQube Helm Chart PGP Signature/Provenance Layer

Related topics