Catalogue des composants gérés (ManagedComponent)

Généré par tools/components/generate.py à partir de catalog/components/*.yaml (schéma contracts/v1/managed-component.schema.json) et de catalog/licence-exceptions.yaml. Politique de licences : ADR-0101. La ressource de cluster qui pilote une instance est la CRD platform.navin.ai/v1alpha1 ManagedComponent (navin-manager/operator). Ne pas éditer à la main.

Synthèse

• 126 composants
• par statut de licence: allowed 101, exception 20, non_compliant 5
• par état d'intégration: integrated 82, partial 35, absent 9

Composants

Id	Nom	Plan	Version	Licence SPDX	Statut	Exception	État	Distribution
navin-manager-console	navin-manager console	experience	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	navin-manager-host, internal-code
navin-rag-web	Navin Enterprise RAG Agent web application	experience	0.1.0	LicenseRef-Navin-Enterprise	allowed		partial	internal-code
navin-sm	Navin SM	experience	2.4.6	LicenseRef-Navin-Enterprise	allowed		partial	internal-code
portal	Enterprise portal	experience	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	kubernetes-chart, compose, internal-code
control-plane-api	Control plane API	platform-management	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	kubernetes-chart, compose, internal-code
control-plane-worker	Control plane worker	platform-management	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	kubernetes-chart, compose, internal-code
haproxy	HAProxy	platform-management	3.2.9	GPL-2.0-or-later	exception	LEX-004	integrated	navin-manager-host
keepalived	Keepalived	platform-management	2.4.3	GPL-2.0-or-later	exception	LEX-005	integrated	navin-manager-host
navin-manager-agent	navin-manager node agent	platform-management	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	navin-manager-host, internal-code
navin-manager-operator	Platform Operator	platform-management	1.0.0	LicenseRef-Navin-Enterprise	allowed		partial	kubernetes-manifest, internal-code
navin-manager-server	navin-manager server	platform-management	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	navin-manager-host, internal-code
client-vault	Client vault (BYO)	identity-governance-policy	byo	LicenseRef-Client-Provided	allowed		partial	byo-client-service
external-secrets	External Secrets Operator	identity-governance-policy	v2.14.0	Apache-2.0	allowed		integrated	kubernetes-chart
keycloak	Keycloak	identity-governance-policy	26.8.1	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
lemonldap-ng	LemonLDAP::NG	identity-governance-policy	2.23.4	GPL-2.0-or-later	exception	LEX-034	partial	navin-manager-host
opa	Open Policy Agent	identity-governance-policy	1.22.0	Apache-2.0	allowed		integrated	kubernetes-manifest, navin-manager-host, compose
openbao	OpenBao	identity-governance-policy	v2.7.2	MPL-2.0	exception	LEX-006	integrated	kubernetes-chart, navin-manager-host, compose
openfga	OpenFGA	identity-governance-policy	v1.22.1	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
spire	SPIFFE/SPIRE	identity-governance-policy	1.15.5	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
apisix	Apache APISIX	agent-execution	3.19.0	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
cognee	Cognee API	agent-execution	1.6.6	Apache-2.0	allowed		partial	navin-manager-host
coraza	Coraza WAF (proxy-wasm) with OWASP CRS	agent-execution	gateway-image	Apache-2.0	allowed		partial	kubernetes-chart
etcd	etcd	agent-execution	3.5.35	Apache-2.0	allowed		integrated	navin-manager-host, kubernetes-chart
gvisor	gVisor	agent-execution	node-provided	Apache-2.0	allowed		partial	kubernetes-manifest, byo-client-service
mcp-sdk	MCP official SDKs	agent-execution	absent	MIT	allowed		absent	library
mem0	Mem0 REST server	agent-execution	2.2.1	Apache-2.0	allowed		partial	navin-manager-host
nats	NATS JetStream	agent-execution	2.15.1	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
navin-mcp-host	Navin MCP host	agent-execution	1.0.0	Apache-2.0	allowed		partial	navin-manager-host
navin-rag-api	Navin Enterprise RAG Agent API	agent-execution	0.1.0	LicenseRef-Navin-Enterprise	allowed		partial	internal-code
navin-rag-worker	Navin Enterprise RAG Agent worker	agent-execution	0.1.0	LicenseRef-Navin-Enterprise	allowed		partial	internal-code
navin-runtime	Navin runtime	agent-execution	1.0.2	LicenseRef-Navin-Enterprise	allowed		integrated	internal-code
temporal	Temporal	agent-execution	1.32.0	MIT	allowed		integrated	kubernetes-chart, navin-manager-host, compose
temporal-ui	Temporal UI	agent-execution	2.54.1	MIT	allowed		integrated	kubernetes-chart, navin-manager-host, compose
toolhive-operator	ToolHive Kubernetes Operator (Stacklok)	agent-execution	v0.59.0	Apache-2.0	allowed		partial	kubernetes-chart, kubernetes-manifest
litellm	LiteLLM Proxy OSS	model	v1.106.5	MIT	allowed		integrated	kubernetes-chart, navin-manager-host, compose, library
llama-factory	LLaMA-Factory	model	0.9.5	Apache-2.0	allowed		integrated	navin-manager-host
model-weights	Model weights	model	byo	LicenseRef-Model-Licences	exception	LEX-012	partial	byo-client-service
ollama	Ollama	model	0.40.14	MIT	allowed		integrated	kubernetes-chart, navin-manager-host, compose
vllm	vLLM	model	v0.33.0	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
aws-cli	AWS CLI	data-privacy	2.27.0	Apache-2.0	allowed		integrated	compose
clamav	ClamAV (clamd, freshclam and HTTPS gateway)	data-privacy	1.4.6	GPL-2.0-only	exception	LEX-022	integrated	navin-manager-host
clickhouse	ClickHouse	data-privacy	25.3.6.10034.altinitystable	Apache-2.0	allowed		integrated	kubernetes-manifest, navin-manager-host, compose
clickhouse-operator	Altinity ClickHouse operator	data-privacy	0.27.4	Apache-2.0	allowed		integrated	kubernetes-chart
cloudnative-pg	CloudNativePG	data-privacy	1.25.0	Apache-2.0	allowed		integrated	kubernetes-chart
docling	Docling (docling-serve)	data-privacy	1.38.2	MIT	allowed		integrated	navin-manager-host
haystack	Haystack	data-privacy	2.18.1	Apache-2.0	allowed		partial	library
label-studio	Label Studio Community Edition	data-privacy	1.23.2	Apache-2.0	allowed		integrated	navin-manager-host
minio	MinIO	data-privacy	absent	AGPL-3.0-only	non_compliant		absent	byo-client-service
openlineage	OpenLineage	data-privacy	absent	Apache-2.0	allowed		partial	library
paddleocr	PaddleOCR	data-privacy	byo	Apache-2.0	allowed		partial	byo-client-service
postgresql	PostgreSQL	data-privacy	16.6	PostgreSQL	exception	LEX-001	integrated	kubernetes-manifest, navin-manager-host, compose
presidio	Microsoft Presidio	data-privacy	2.2.366	MIT	allowed		integrated	navin-manager-host
qdrant	Qdrant	data-privacy	v1.20.0	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
redis	Redis	data-privacy	v7.2.17	BSD-3-Clause	exception	LEX-002	integrated	kubernetes-chart, navin-manager-host, compose
redis-operator	Redis operator (OT-CONTAINER-KIT)	data-privacy	v0.27.0	Apache-2.0	allowed		integrated	kubernetes-chart
seaweedfs	SeaweedFS	data-privacy	4.51	Apache-2.0	allowed		partial	byo-client-service, compose
storage-connector	Client storage connector (BYO)	data-privacy	byo	LicenseRef-Client-Provided	allowed		integrated	byo-client-service
tink	Google Tink	data-privacy	1.16.1	Apache-2.0	allowed		integrated	library
yara-x	YARA-X (rule scanning worker)	data-privacy	1.22.1	BSD-3-Clause	exception	LEX-023	integrated	navin-manager-host
asterisk	Asterisk	multimodal	20.6.0	GPL-2.0-only WITH Asterisk-linking-protocols-exception	exception	LEX-024	partial	navin-manager-host
espeak-ng	espeak-ng and phonemizer	multimodal	separate-process	GPL-3.0-or-later	exception	LEX-020	partial	library
faster-whisper	faster-whisper	multimodal	1.2.1	MIT	allowed		integrated	library
ffmpeg	FFmpeg and codecs	multimodal	distribution-package	LGPL-2.1-or-later AND GPL-2.0-or-later	exception	LEX-010	partial	library
kamailio	Kamailio	multimodal	5.7.4	GPL-2.0-or-later	exception	LEX-025	partial	navin-manager-host
kokoro	Kokoro (kokoro-onnx)	multimodal	0.6.1	MIT	allowed		integrated	library
livekit	LiveKit Server	multimodal	v1.9.0	Apache-2.0	allowed		integrated	kubernetes-manifest, navin-manager-host, compose
livekit-agents	LiveKit Agents workers (navin-voice-agent)	multimodal	1.0.0	Apache-2.0	allowed		partial	navin-manager-host
livekit-egress	LiveKit Egress	multimodal	1.15.0	Apache-2.0	allowed		partial	navin-manager-host
livekit-ingress	LiveKit Ingress	multimodal	1.5.0	Apache-2.0	allowed		partial	navin-manager-host
livekit-sip	LiveKit SIP	multimodal	1.22.0	Apache-2.0	allowed		partial	navin-manager-host
media-worker	Media worker	multimodal	1.0.0	LicenseRef-Navin-Enterprise	allowed		integrated	kubernetes-chart, compose, internal-code
opencv	OpenCV	multimodal	absent	Apache-2.0	allowed		absent	library
pyannote-audio	pyannote.audio	multimodal	>=3.1	MIT	allowed		integrated	library
rtpengine	RTPengine	multimodal	11.5.1.18	GPL-3.0-or-later	exception	LEX-026	partial	navin-manager-host
silero-vad	Silero VAD	multimodal	6.2.3	MIT	allowed		integrated	library
alertmanager	Alertmanager	observability-audit-soc	v0.34.2	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
alloy	Grafana Alloy	observability-audit-soc	v1.21.3	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
blackbox-exporter	Blackbox exporter	observability-audit-soc	0.27.0	Apache-2.0	allowed		integrated	navin-manager-host
elasticsearch	Elasticsearch	observability-audit-soc	absent	AGPL-3.0-only OR SSPL-1.0 OR Elastic-2.0	non_compliant		absent	byo-client-service
falco	Falco	observability-audit-soc	node-provided	Apache-2.0	allowed		partial	kubernetes-manifest, byo-client-service
garak	garak	observability-audit-soc	0.12.0	Apache-2.0	allowed		integrated	ci-tool, navin-manager-host
grafana	Grafana	observability-audit-soc	absent	AGPL-3.0-only	non_compliant		absent	byo-client-service
jaeger	Jaeger	observability-audit-soc	2.22.0	Apache-2.0	allowed		integrated	kubernetes-chart
kube-state-metrics	kube-state-metrics	observability-audit-soc	v2.20.0	Apache-2.0	allowed		integrated	kubernetes-chart
langfuse	Langfuse	observability-audit-soc	absent	MIT AND LicenseRef-Langfuse-EE	non_compliant		absent	byo-client-service
loki	Grafana Loki	observability-audit-soc	absent	AGPL-3.0-only	non_compliant		absent	byo-client-service
mysql	MySQL (Opik state)	observability-audit-soc	8.4.5	GPL-2.0-only	exception	LEX-003	partial	byo-client-service, navin-manager-host
nats-exporter	Prometheus NATS exporter	observability-audit-soc	0.20.2	Apache-2.0	allowed		integrated	kubernetes-chart
node-exporter	Prometheus node exporter	observability-audit-soc	v1.12.1	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
opensearch	OpenSearch and Security Analytics	observability-audit-soc	3.9.0	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
opensearch-dashboards	OpenSearch Dashboards	observability-audit-soc	2.19.2	Apache-2.0	allowed		integrated	navin-manager-host
opentelemetry-sdk	OpenTelemetry SDK (Python)	observability-audit-soc	>=1.25	Apache-2.0	allowed		integrated	library
opik	Opik	observability-audit-soc	2.2.137	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host
otel-collector	OpenTelemetry Collector (contrib)	observability-audit-soc	0.163.2	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
postgres-exporter	PostgreSQL exporter	observability-audit-soc	0.17.1	Apache-2.0	allowed		integrated	navin-manager-host
prometheus	Prometheus	observability-audit-soc	v3.15.1	Apache-2.0	allowed		integrated	kubernetes-chart, navin-manager-host, compose
prometheus-operator	Prometheus operator	observability-audit-soc	v0.94.2	Apache-2.0	allowed		integrated	kubernetes-chart
promptfoo	Promptfoo	observability-audit-soc	0.117.4	MIT	allowed		integrated	ci-tool, navin-manager-host
ragas	Ragas	observability-audit-soc	0.3.2	Apache-2.0	allowed		integrated	ci-tool, navin-manager-host
redis-exporter	Redis exporter	observability-audit-soc	v1.44.0	MIT	allowed		integrated	kubernetes-chart, navin-manager-host
tetragon	Tetragon	observability-audit-soc	node-provided	Apache-2.0	allowed		partial	kubernetes-manifest, byo-client-service
thanos	Thanos sidecar	observability-audit-soc	v0.42.5	Apache-2.0	allowed		integrated	kubernetes-chart
wazuh	Wazuh (client SIEM connector)	observability-audit-soc	byo	GPL-2.0-only	exception	LEX-009	partial	byo-client-service
zookeeper	Apache ZooKeeper	observability-audit-soc	3.9.4	Apache-2.0	allowed		integrated	kubernetes-chart
argocd	Argo CD	infrastructure-devsecops	v2.13.2	Apache-2.0	allowed		integrated	kubernetes-chart
cert-manager	cert-manager	infrastructure-devsecops	v1.16.2	Apache-2.0	allowed		integrated	kubernetes-chart, kubernetes-manifest
cilium	Cilium	infrastructure-devsecops	1.16.5	Apache-2.0	allowed		integrated	kubernetes-chart, kubernetes-manifest
cosign	Cosign	infrastructure-devsecops	2.6.5	Apache-2.0	allowed		integrated	ci-tool
forgejo	Forgejo (CI)	infrastructure-devsecops	byo	GPL-3.0-or-later	exception	LEX-008	partial	byo-client-service
gitea	Gitea	infrastructure-devsecops	absent	MIT	allowed		absent	byo-client-service
gitleaks	Gitleaks	infrastructure-devsecops	v8.21.2	MIT	allowed		integrated	ci-tool
harbor	Harbor	infrastructure-devsecops	1.19.4	Apache-2.0	allowed		partial	byo-client-service, kubernetes-chart
helm	Helm	infrastructure-devsecops	v3.16.3	Apache-2.0	allowed		integrated	ci-tool
keda	KEDA and HPA	infrastructure-devsecops	2.16.1	Apache-2.0	allowed		integrated	kubernetes-chart, kubernetes-manifest
kubeconform	kubeconform	infrastructure-devsecops	v0.6.7	Apache-2.0	allowed		integrated	ci-tool
kubernetes	Kubernetes	infrastructure-devsecops	byo	Apache-2.0	allowed		integrated	byo-client-service
kyverno	Kyverno	infrastructure-devsecops	v1.13.2	Apache-2.0	allowed		integrated	kubernetes-chart, kubernetes-manifest
nvidia-gpu-stack	NVIDIA GPU Operator, drivers and CUDA	infrastructure-devsecops	v24.9.1	Apache-2.0	exception	LEX-011	partial	kubernetes-chart, byo-client-service
opentofu	OpenTofu	infrastructure-devsecops	1.8.7	MPL-2.0	exception	LEX-007	integrated	ci-tool
pulumi	Pulumi OSS	infrastructure-devsecops	absent	Apache-2.0	allowed		absent	ci-tool
semgrep	Semgrep CE	infrastructure-devsecops	1.99.0	LGPL-2.1-only	exception	LEX-019	integrated	ci-tool
syft	Syft	infrastructure-devsecops	1.55.0	Apache-2.0	allowed		integrated	ci-tool
tekton	Tekton Pipelines	infrastructure-devsecops	v1.18.0	Apache-2.0	allowed		partial	ci-tool
trivy	Trivy	infrastructure-devsecops	0.58.1	Apache-2.0	allowed		integrated	ci-tool
velero	Velero	infrastructure-devsecops	v1.15.0	Apache-2.0	allowed		integrated	kubernetes-chart, kubernetes-manifest
zap	ZAP	infrastructure-devsecops	2.15.0	Apache-2.0	allowed		integrated	ci-tool

Non conformités (bloquent la livraison)

Aucune.

Ordre d'installation (graphe de dépendances, tri topologique)

Chaque couche ne dépend que des couches précédentes ; le graphe est acyclique.

1. Couche 1: asterisk, clamav, coraza, cosign, docling, elasticsearch, espeak-ng, etcd, ffmpeg, forgejo, garak, gitea, gitleaks, grafana, haproxy, harbor, helm, keepalived, kubeconform, kubernetes, langfuse, loki, mcp-sdk, minio, model-weights, mysql, opencv, openlineage, opentofu, presidio, promptfoo, pulumi, ragas, rtpengine, seaweedfs, semgrep, storage-connector, syft, tekton, trivy, wazuh, yara-x, zap
2. Couche 2: apisix (coraza, etcd), argocd (kubernetes), aws-cli (seaweedfs), cert-manager (kubernetes), cilium (kubernetes), clickhouse-operator (kubernetes), cloudnative-pg (kubernetes), falco (kubernetes), faster-whisper (model-weights), gvisor (kubernetes), kamailio (asterisk), keda (kubernetes), kokoro (model-weights), kyverno (kubernetes), nats (kubernetes), navin-manager-operator (kubernetes), nvidia-gpu-stack (kubernetes), opa (kubernetes), openbao (kubernetes), opensearch (kubernetes), paddleocr (model-weights), prometheus (kubernetes), pyannote-audio (model-weights), qdrant (kubernetes), redis-operator (kubernetes), silero-vad (model-weights), spire (kubernetes), tetragon (kubernetes), velero (kubernetes, storage-connector), zookeeper (kubernetes)
3. Couche 3: alertmanager (prometheus), blackbox-exporter (prometheus), clickhouse (clickhouse-operator, zookeeper), external-secrets (kubernetes, openbao), haystack (qdrant), jaeger (opensearch), kube-state-metrics (prometheus), llama-factory (model-weights, nvidia-gpu-stack), media-worker (faster-whisper, ffmpeg, kokoro, nats, nvidia-gpu-stack, pyannote-audio, silero-vad, storage-connector), nats-exporter (prometheus), node-exporter (prometheus), ollama (model-weights, nvidia-gpu-stack), opensearch-dashboards (opensearch), postgres-exporter (prometheus), postgresql (cloudnative-pg), prometheus-operator (prometheus), redis (redis-operator), redis-exporter (prometheus), thanos (prometheus), tink (openbao), toolhive-operator (cilium, kubernetes, kyverno), vllm (model-weights, nvidia-gpu-stack)
4. Couche 4: client-vault (external-secrets), keycloak (postgresql), label-studio (postgresql, seaweedfs), lemonldap-ng (postgresql), litellm (postgresql, redis), livekit (redis), navin-manager-server (postgresql), openfga (postgresql), opik (clickhouse, mysql, redis, zookeeper), temporal (postgresql)
5. Couche 5: cognee (litellm, postgresql), livekit-agents (litellm, livekit), livekit-egress (livekit, redis, seaweedfs), livekit-ingress (livekit, redis), livekit-sip (livekit, redis), mem0 (litellm, postgresql), navin-manager-agent (navin-manager-server), navin-manager-console (navin-manager-server), navin-runtime (gvisor, nats, temporal), navin-sm (litellm), otel-collector (jaeger, opensearch, opik, prometheus), temporal-ui (temporal)
6. Couche 6: alloy (otel-collector), control-plane-api (keycloak, litellm, nats, navin-runtime, opa, openbao, openfga, opik, otel-collector, postgresql, qdrant, redis, storage-connector, temporal, tink), navin-mcp-host (navin-manager-agent, navin-manager-server), opentelemetry-sdk (otel-collector)
7. Couche 7: control-plane-worker (control-plane-api), navin-rag-api (control-plane-api, keycloak, postgresql, redis), navin-rag-worker (control-plane-api, postgresql), portal (control-plane-api, keycloak)
8. Couche 8: navin-rag-web (keycloak, navin-rag-api, redis)

Matrice de versions et de compatibilité (ce qui est épinglé où)

Composant	Fichier	Type	Rôle	Valeur épinglée	Licence de cette version	Statut
alertmanager	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v0.34.2	Apache-2.0	allowed
alertmanager	navin-manager/catalog/services/alertmanager.yaml	navin-manager-catalog	host	0.28.1	Apache-2.0	allowed
alertmanager	deploy/compose/docker-compose.yml (alertmanager)	compose-image	compose-dev	prom/alertmanager:v0.27.0	Apache-2.0	allowed
alloy	deploy/argocd/applicationset.yaml (alloy)	argocd-chart	chart	1.14.4	Apache-2.0	allowed
alloy	deploy/observability/alloy/values.yaml	text	kubernetes	v1.21.3	Apache-2.0	allowed
alloy	navin-manager/catalog/services/alloy.yaml	navin-manager-catalog	host	1.10.0	Apache-2.0	allowed
apisix	deploy/apisix/values.yaml	text	kubernetes	3.19.0-ubuntu	Apache-2.0	allowed
apisix	deploy/argocd/applicationset.yaml (apisix)	argocd-chart	chart	2.18.2	Apache-2.0	allowed
apisix	navin-manager/catalog/services/apisix.yaml	navin-manager-catalog	host	3.19.0	Apache-2.0	allowed
argocd	deploy/terraform/modules/platform-bootstrap/variables.tf (argocd)	text	chart	"7.7.11"	Apache-2.0	allowed
asterisk	navin-manager/catalog/services/asterisk.yaml	navin-manager-catalog	host	20.6.0	GPL-2.0-only WITH Asterisk-linking-protocols-exception	exception LEX-024
aws-cli	deploy/compose/docker-compose.yml (seaweedfs-init)	compose-image	compose-dev	amazon/aws-cli:2.27.0@sha256:e3e329e1d2894b7b4bbb0aacacd0a155262159b2e7a3b4275eb1f24046d3e06c	Apache-2.0	allowed
blackbox-exporter	navin-manager/catalog/services/blackbox-exporter.yaml	navin-manager-catalog	host	0.27.0	Apache-2.0	allowed
cert-manager	deploy/terraform/modules/platform-bootstrap/variables.tf (cert_manager)	text	chart	v1.16.2	Apache-2.0	allowed
cilium	deploy/terraform/modules/platform-bootstrap/variables.tf (cilium)	text	chart	"1.16.5"	Apache-2.0	allowed
clamav	navin-manager/catalog/services/clamav.yaml	navin-manager-catalog	host	1.4.6	GPL-2.0-only	exception LEX-022
clickhouse	deploy/data/clickhouse/k8s/clickhouse-installation.yaml	text	kubernetes	25.3.6.10034.altinitystable	Apache-2.0	allowed
clickhouse	deploy/observability/opik/values.yaml	text	kubernetes	26.3.16.10001.altinitystable	Apache-2.0	allowed
clickhouse	navin-manager/catalog/services/clickhouse.yaml	navin-manager-catalog	host	25.3.3.42	Apache-2.0	allowed
clickhouse	deploy/compose/docker-compose.yml (clickhouse)	compose-image	compose-dev	clickhouse/clickhouse-server:24.8	Apache-2.0	allowed
clickhouse-operator	deploy/argocd/applicationset.yaml (clickhouse-operator)	argocd-chart	chart	0.27.4	Apache-2.0	allowed
clickhouse-operator	deploy/data/clickhouse/values.yaml	text	kubernetes	"0.27.4"	Apache-2.0	allowed
cloudnative-pg	deploy/terraform/modules/platform-bootstrap/variables.tf (cnpg)	text	chart	0.23.0	Apache-2.0	allowed
cognee	navin-manager/catalog/services/cognee.yaml	navin-manager-catalog	host	1.6.6	Apache-2.0	allowed
control-plane-api	services/control-plane/pyproject.toml	text	reference	version = "1.0.2"	LicenseRef-Navin-Enterprise	allowed
control-plane-api	deploy/gitops/prod/image-tags.yaml (controlPlane)	text	kubernetes	image: {tag: "1.0.0"}	LicenseRef-Navin-Enterprise	allowed
control-plane-api	navin-manager/catalog/services/navin-enterprise.yaml	navin-manager-catalog	host	1.0.0	LicenseRef-Navin-Enterprise	allowed
control-plane-worker	services/control-plane/pyproject.toml	text	reference	version = "1.0.2"	LicenseRef-Navin-Enterprise	allowed
coraza	deploy/apisix/config.yaml	text	kubernetes	coraza-proxy-wasm.wasm	Apache-2.0	allowed
cosign	tools/oci/fetch.sh	text	ci	COSIGN_VERSION="2.6.5"	Apache-2.0	allowed
docling	navin-manager/catalog/services/docling.yaml	navin-manager-catalog	host	1.38.2	MIT	allowed
etcd	navin-manager/catalog/services/etcd.yaml	navin-manager-catalog	host	3.5.35	Apache-2.0	allowed
external-secrets	deploy/argocd/applicationset.yaml (external-secrets)	argocd-chart	chart	2.14.0	Apache-2.0	allowed
external-secrets	deploy/external-secrets/values.yaml	text	kubernetes	v2.14.0	Apache-2.0	allowed
falco	navin-manager/catalog/services/falco.yaml	navin-manager-catalog	host	0.45.2	Apache-2.0	allowed
faster-whisper	services/control-plane/pyproject.toml	text	library	"faster-whisper>=1.0"	MIT	allowed
ffmpeg	deploy/docker/worker.Dockerfile	text	kubernetes	ffmpeg	LGPL-2.1-or-later AND GPL-2.0-or-later	exception LEX-010
garak	navin-manager/catalog/services/garak.yaml	navin-manager-catalog	host	0.12.0	Apache-2.0	allowed
gitleaks	.forgejo/workflows/ci.yml	text	ci	zricethezav/gitleaks:v8.21.2	MIT	allowed
gvisor	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	handler: runsc	Apache-2.0	allowed
haproxy	navin-manager/catalog/services/haproxy.yaml	navin-manager-catalog	host	3.2.9	GPL-2.0-or-later	exception LEX-004
harbor	deploy/harbor/values.yaml	text	reference	chart 1.19.4	Apache-2.0	allowed
haystack	services/control-plane/pyproject.toml	text	library	"haystack-ai==2.18.1"	Apache-2.0	allowed
haystack	navin-manager/catalog/services/haystack.yaml	navin-manager-catalog	library	2.18.1	Apache-2.0	allowed
helm	.forgejo/workflows/ci.yml	text	ci	helm-v3.16.3	Apache-2.0	allowed
jaeger	deploy/argocd/applicationset.yaml (jaeger)	argocd-chart	chart	4.16.1	Apache-2.0	allowed
jaeger	deploy/observability/jaeger/values.yaml	text	kubernetes	2.22.0	Apache-2.0	allowed
jaeger	deploy/compose/docker-compose.yml (jaeger)	compose-image	compose-dev	jaegertracing/jaeger:2.22.0@sha256:836b967b5abcf1f7758066aa6b348619267a2f1459f72d472840570f9bd88a17	Apache-2.0	allowed
jaeger	navin-manager/catalog/services/jaeger.yaml	navin-manager-catalog	host	2.22.0	Apache-2.0	allowed
kamailio	navin-manager/catalog/services/kamailio.yaml	navin-manager-catalog	host	5.7.4	GPL-2.0-or-later	exception LEX-025
keda	deploy/terraform/modules/platform-bootstrap/variables.tf (keda)	text	chart	"2.16.1"	Apache-2.0	allowed
keepalived	navin-manager/catalog/services/keepalived.yaml	navin-manager-catalog	host	2.4.3	GPL-2.0-or-later	exception LEX-005
keycloak	deploy/keycloak/values.yaml (tag)	text	kubernetes	"26.8.1"	Apache-2.0	allowed
keycloak	deploy/argocd/applicationset.yaml (keycloak)	argocd-chart	chart	7.4.0	Apache-2.0	allowed
keycloak	navin-manager/catalog/services/keycloak.yaml	navin-manager-catalog	host	26.8.1	Apache-2.0	allowed
keycloak	deploy/compose/docker-compose.yml (keycloak)	compose-image	compose-dev	quay.io/keycloak/keycloak:26.8.1@sha256:a78d6b79572168cb25886b80a8b5b8d4ed4390743e3eecb810538683e209dd6b	Apache-2.0	allowed
kokoro	services/control-plane/pyproject.toml	text	library	"kokoro-onnx==0.6.1"	MIT	allowed
kube-state-metrics	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v2.20.0	Apache-2.0	allowed
kubeconform	.forgejo/workflows/ci.yml	text	ci	kubeconform/releases/download/v0.6.7	Apache-2.0	allowed
kyverno	deploy/terraform/modules/platform-bootstrap/variables.tf (kyverno)	text	chart	"3.3.4"	Apache-2.0	allowed
label-studio	navin-manager/catalog/services/label-studio.yaml	navin-manager-catalog	host	1.23.2	Apache-2.0	allowed
lemonldap-ng	navin-manager/catalog/services/lemonldap-ng.yaml	navin-manager-catalog	host	2.23.4	GPL-2.0-or-later	exception LEX-034
litellm	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	tag: "1.106.5"	MIT	allowed
litellm	deploy/compose/docker-compose.yml (litellm)	compose-image	compose-dev	${IMAGE_REGISTRY:-harbor.example.internal/eai}/litellm:1.106.5	MIT	allowed
litellm	deploy/litellm/requirements.lock	text	ci	litellm==1.106.5	MIT	allowed
litellm	services/control-plane/pyproject.toml	text	library	"litellm==1.106.5"	MIT	allowed
litellm	navin-manager/catalog/services/litellm.yaml	navin-manager-catalog	host	1.106.5	MIT	allowed
livekit	deploy/livekit/livekit.yaml	text	kubernetes	livekit-server:v1.9.0	Apache-2.0	allowed
livekit	navin-manager/catalog/services/livekit.yaml	navin-manager-catalog	host	1.13.11	Apache-2.0	allowed
livekit	deploy/compose/docker-compose.yml (livekit)	compose-image	compose-dev	livekit/livekit-server:v1.8.0	Apache-2.0	allowed
livekit-agents	navin-manager/catalog/services/livekit-agents.yaml	navin-manager-catalog	host	1.0.0	Apache-2.0	allowed
livekit-egress	navin-manager/catalog/services/livekit-egress.yaml	navin-manager-catalog	host	1.15.0	Apache-2.0	allowed
livekit-ingress	navin-manager/catalog/services/livekit-ingress.yaml	navin-manager-catalog	host	1.5.0	Apache-2.0	allowed
livekit-sip	navin-manager/catalog/services/livekit-sip.yaml	navin-manager-catalog	host	1.22.0	Apache-2.0	allowed
llama-factory	navin-manager/catalog/services/llama-factory.yaml	navin-manager-catalog	host	0.9.5	Apache-2.0	allowed
media-worker	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	repository: worker	LicenseRef-Navin-Enterprise	allowed
mem0	navin-manager/catalog/services/mem0.yaml	navin-manager-catalog	host	2.2.1	Apache-2.0	allowed
mysql	navin-manager/catalog/services/mysql.yaml	navin-manager-catalog	host	8.4.5	GPL-2.0-only	exception LEX-003
nats	deploy/argocd/applicationset.yaml (nats)	argocd-chart	chart	2.15.1	Apache-2.0	allowed
nats	deploy/data/nats/values.yaml	text	kubernetes	2.15.1-alpine	Apache-2.0	allowed
nats	navin-manager/catalog/services/nats.yaml	navin-manager-catalog	host	2.11.17	Apache-2.0	allowed
nats	deploy/compose/docker-compose.yml (nats)	compose-image	compose-dev	nats:2.15.1-alpine@sha256:7ae34c25dfd6fe2e01c6483eabef20d796690fdcac6c4d94ca780a6cf9877fde	Apache-2.0	allowed
nats-exporter	deploy/data/nats/values.yaml	text	kubernetes	0.20.2	Apache-2.0	allowed
navin-manager-agent	navin-manager/agent/pyproject.toml	text	reference	version = "1.0.2"	LicenseRef-Navin-Enterprise	allowed
navin-manager-console	navin-manager/ui/package.json	text	reference	"version": "1.0.2"	LicenseRef-Navin-Enterprise	allowed
navin-manager-operator	navin-manager/operator/go.mod	text	reference	module	LicenseRef-Navin-Enterprise	allowed
navin-manager-server	navin-manager/server/pyproject.toml	text	reference	version = "1.0.2"	LicenseRef-Navin-Enterprise	allowed
navin-mcp-host	navin-manager/catalog/services/mcp-host.yaml	navin-manager-catalog	host	1.0.0	Apache-2.0	allowed
navin-mcp-host	navin-manager/catalog/services/mcp-host.yaml	text	host	sha256:4b150b48b4116e2a22f2c39cc27025fbf4f153e2078fd3b14d159fdb5c7279da	MIT	allowed
navin-mcp-host	navin-manager/catalog/services/mcp-host.yaml	text	host	sha256:e5b65587bce7de595f299855d7385fe7fca39b8a74baa261ba1b7147afa78e58	Apache-2.0	allowed
navin-rag-api	navin-enterprise-rag/backend/pyproject.toml	text	reference	version = "0.1.0"	LicenseRef-Navin-Enterprise	allowed
navin-rag-api	navin-enterprise-rag/backend/src/navin_rag/__init__.py	text	library	__version__ = "0.1.0"	LicenseRef-Navin-Enterprise	allowed
navin-rag-web	navin-enterprise-rag/frontend/package.json	text	reference	"version": "0.1.0"	LicenseRef-Navin-Enterprise	allowed
navin-rag-worker	navin-enterprise-rag/backend/pyproject.toml	text	reference	version = "0.1.0"	LicenseRef-Navin-Enterprise	allowed
navin-runtime	services/control-plane/pyproject.toml	text	reference	version = "1.0.2"	LicenseRef-Navin-Enterprise	allowed
navin-sm	navin-manager/catalog/services/navin-sm.yaml	navin-manager-catalog	reference	2.4.6	LicenseRef-Navin-Enterprise	allowed
node-exporter	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v1.12.1	Apache-2.0	allowed
node-exporter	navin-manager/catalog/services/node-exporter.yaml	navin-manager-catalog	host	1.9.1	Apache-2.0	allowed
nvidia-gpu-stack	deploy/terraform/modules/platform-bootstrap/variables.tf (gpu_operator)	text	chart	v24.9.1	Apache-2.0	exception LEX-011
ollama	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	tag: "0.40.14"	MIT	allowed
ollama	navin-manager/catalog/services/ollama.yaml	navin-manager-catalog	host	0.40.14	MIT	allowed
ollama	deploy/compose/docker-compose.yml (ollama)	compose-image	compose-dev	ollama/ollama:0.40.14	MIT	allowed
opa	deploy/policies/opa/opa-server.k8s	text	kubernetes	opa:1.22.0-static	Apache-2.0	allowed
opa	navin-manager/catalog/services/opa.yaml	navin-manager-catalog	host	1.21.4	Apache-2.0	allowed
opa	deploy/compose/docker-compose.yml (opa)	compose-image	compose-dev	openpolicyagent/opa:1.0.0-static	Apache-2.0	allowed
opa	.forgejo/workflows/ci.yml	text	ci	openpolicyagent/opa:1.0.0-debug	Apache-2.0	allowed
openbao	deploy/openbao/values.yaml (tag)	text	kubernetes	v2.7.2	MPL-2.0	exception LEX-006
openbao	deploy/argocd/applicationset.yaml (openbao)	argocd-chart	chart	0.30.6	MPL-2.0	exception LEX-006
openbao	navin-manager/catalog/services/openbao.yaml	navin-manager-catalog	host	2.7.2	MPL-2.0	exception LEX-006
openbao	deploy/compose/docker-compose.yml (openbao)	compose-image	compose-dev	quay.io/openbao/openbao:2.1.0	MPL-2.0	exception LEX-006
openfga	deploy/policies/openfga/values.yaml (tag)	text	kubernetes	v1.22.1	Apache-2.0	allowed
openfga	deploy/argocd/applicationset.yaml (openfga)	argocd-chart	chart	0.3.19	Apache-2.0	allowed
openfga	navin-manager/catalog/services/openfga.yaml	navin-manager-catalog	host	1.22.1	Apache-2.0	allowed
openfga	deploy/compose/docker-compose.yml (openfga)	compose-image	compose-dev	openfga/openfga:v1.8.1	Apache-2.0	allowed
openfga	deploy/compose/docker-compose.yml (openfga-migrate)	compose-image	compose-dev	openfga/openfga:v1.8.1	Apache-2.0	allowed
openlineage	navin-manager/catalog/services/openlineage.yaml	navin-manager-catalog	library	1.55.0	Apache-2.0	allowed
openlineage	navin-manager/catalog/services/marquez.yaml	navin-manager-catalog	host	0.51.1	Apache-2.0	allowed
opensearch	deploy/argocd/applicationset.yaml (opensearch)	argocd-chart	chart	3.9.0	Apache-2.0	allowed
opensearch	deploy/observability/opensearch/values.yaml	text	kubernetes	"3.9.0@sha256:	Apache-2.0	allowed
opensearch	navin-manager/catalog/services/opensearch.yaml	navin-manager-catalog	host	2.19.2	Apache-2.0	allowed
opensearch	deploy/compose/docker-compose.yml (opensearch)	compose-image	compose-dev	opensearchproject/opensearch:3.9.0@sha256:3b55f6b6249cfdb92b52ee59adc8a266203ba9ef9f5d82544fad6f1af2f3609e	Apache-2.0	allowed
opensearch-dashboards	navin-manager/catalog/services/opensearch-dashboards.yaml	navin-manager-catalog	host	2.19.2	Apache-2.0	allowed
opentelemetry-sdk	services/control-plane/pyproject.toml	text	library	"opentelemetry-sdk>=1.25"	Apache-2.0	allowed
opentofu	.forgejo/workflows/ci.yml	text	ci	tofu_1.8.7_linux_amd64.tar.gz	MPL-2.0	exception LEX-007
opik	deploy/argocd/applicationset.yaml (opik)	argocd-chart	chart	2.2.137	Apache-2.0	allowed
opik	deploy/observability/opik/values.yaml	text	kubernetes	"2.2.137@sha256:7e3174d0	Apache-2.0	allowed
opik	navin-manager/catalog/services/opik.yaml	navin-manager-catalog	host	1.8.16	Apache-2.0	allowed
opik	deploy/compose/docker-compose.yml (opik-backend)	compose-image	compose-dev	ghcr.io/comet-ml/opik/opik-backend:2.2.137@sha256:7e3174d0f32fc9d7d77b1af9145e77d715e14eb0d9c0695ecd2543d8f14c825c	Apache-2.0	allowed
opik	deploy/compose/docker-compose.yml (opik-frontend)	compose-image	compose-dev	ghcr.io/comet-ml/opik/opik-frontend:2.2.137@sha256:29b685c612b2a6f05e356b2ead5e8438afb544f2374d35408ad4258cda2ab905	Apache-2.0	allowed
otel-collector	deploy/argocd/applicationset.yaml (otel-collector)	argocd-chart	chart	0.178.1	Apache-2.0	allowed
otel-collector	deploy/observability/otel-collector/values.yaml	text	kubernetes	"0.163.2"	Apache-2.0	allowed
otel-collector	navin-manager/catalog/services/otel-collector.yaml	navin-manager-catalog	host	0.130.0	Apache-2.0	allowed
otel-collector	deploy/compose/docker-compose.yml (otel-collector)	compose-image	compose-dev	otel/opentelemetry-collector-contrib:0.163.2@sha256:7f22d2a6748110ffb6a59bc0df448bccbf501cdb667d610ede4c61d3863d5849	Apache-2.0	allowed
portal	portal/package.json	text	reference	"version": "1.0.2"	LicenseRef-Navin-Enterprise	allowed
postgres-exporter	navin-manager/catalog/services/postgres-exporter.yaml	navin-manager-catalog	host	0.17.1	Apache-2.0	allowed
postgresql	deploy/data/postgres/cluster.yaml	text	kubernetes	postgresql:16.6	PostgreSQL	exception LEX-001
postgresql	navin-manager/catalog/services/postgresql.yaml	navin-manager-catalog	host	16.15	PostgreSQL	exception LEX-001
postgresql	deploy/compose/docker-compose.yml (postgres)	compose-image	compose-dev	postgres:16-alpine	PostgreSQL	exception LEX-001
postgresql	.forgejo/workflows/ci.yml	text	ci	postgres:16-alpine	PostgreSQL	exception LEX-001
presidio	navin-manager/catalog/services/presidio.yaml	navin-manager-catalog	host	2.2.366	MIT	allowed
prometheus	deploy/argocd/applicationset.yaml (kube-prometheus-stack)	argocd-chart	chart	92.16.0	Apache-2.0	allowed
prometheus	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v3.15.1-distroless	Apache-2.0	allowed
prometheus	navin-manager/catalog/services/prometheus.yaml	navin-manager-catalog	host	3.5.5	Apache-2.0	allowed
prometheus	deploy/compose/docker-compose.yml (prometheus)	compose-image	compose-dev	prom/prometheus:v3.0.1	Apache-2.0	allowed
prometheus-operator	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v0.94.2	Apache-2.0	allowed
promptfoo	navin-manager/catalog/services/promptfoo.yaml	navin-manager-catalog	host	0.117.4	MIT	allowed
pyannote-audio	services/control-plane/pyproject.toml	text	library	"pyannote.audio>=3.1"	MIT	allowed
qdrant	deploy/argocd/applicationset.yaml (qdrant)	argocd-chart	chart	1.20.0	Apache-2.0	allowed
qdrant	deploy/data/qdrant/values.yaml	text	kubernetes	v1.20.0	Apache-2.0	allowed
qdrant	navin-manager/catalog/services/qdrant.yaml	navin-manager-catalog	host	1.14.1	Apache-2.0	allowed
qdrant	deploy/compose/docker-compose.yml (qdrant)	compose-image	compose-dev	qdrant/qdrant:v1.12.5	Apache-2.0	allowed
ragas	navin-manager/catalog/services/ragas.yaml	navin-manager-catalog	host	0.3.2	Apache-2.0	allowed
redis	deploy/argocd/applicationset.yaml (redis)	argocd-chart	chart	0.17.1	Apache-2.0	exception LEX-002
redis	deploy/argocd/applicationset.yaml (redis-opik)	argocd-chart	chart	0.17.1	Apache-2.0	exception LEX-002
redis	deploy/data/redis/values.yaml	text	kubernetes	v7.2.17	BSD-3-Clause	exception LEX-002
redis	navin-manager/catalog/services/redis.yaml	navin-manager-catalog	host	7.2.17	BSD-3-Clause	exception LEX-002
redis	deploy/compose/docker-compose.yml (redis)	compose-image	compose-dev	redis:7.2.17-alpine@sha256:2c933526722b4126a61d5c170f766dc159adf97682f0b1cbbc27b1666ba96d84	BSD-3-Clause	exception LEX-002
redis-exporter	deploy/data/redis/values.yaml	text	kubernetes	"v1.44.0"	MIT	allowed
redis-exporter	navin-manager/catalog/services/redis-exporter.yaml	navin-manager-catalog	host	1.75.0	MIT	allowed
redis-operator	deploy/argocd/applicationset.yaml (redis-operator)	argocd-chart	chart	0.27.0	Apache-2.0	allowed
redis-operator	deploy/data/redis-operator/values.yaml	text	kubernetes	v0.27.0	Apache-2.0	allowed
rtpengine	navin-manager/catalog/services/rtpengine.yaml	navin-manager-catalog	host	11.5.1.18	GPL-3.0-or-later	exception LEX-026
seaweedfs	deploy/compose/docker-compose.yml (seaweedfs)	compose-image	compose-dev	chrislusf/seaweedfs:4.51@sha256:f7a49e3f3972ebed5be2ed4befa4a0c68eb7bdddba6e692d42729ceb545134b8	Apache-2.0	allowed
seaweedfs	navin-manager/catalog/services/seaweedfs.yaml	navin-manager-catalog	host	4.51	Apache-2.0	allowed
semgrep	.forgejo/workflows/ci.yml	text	ci	semgrep/semgrep:1.99.0	LGPL-2.1-only	exception LEX-019
silero-vad	services/control-plane/pyproject.toml	text	library	"silero-vad>=5.1"	MIT	allowed
spire	deploy/argocd/applicationset.yaml (spire)	argocd-chart	chart	0.30.4	Apache-2.0	allowed
spire	deploy/argocd/applicationset.yaml (spire-crds)	argocd-chart	chart	0.6.1	Apache-2.0	allowed
spire	navin-manager/catalog/services/spire.yaml	navin-manager-catalog	host	1.15.5	Apache-2.0	allowed
syft	tools/components/fetch-syft.sh	text	ci	SYFT_VERSION="1.55.0"	Apache-2.0	allowed
tekton	deploy/tekton/release-pipeline.yaml	text	ci	Tekton Pipelines v1.18.0	Apache-2.0	allowed
temporal	deploy/argocd/applicationset.yaml (temporal)	argocd-chart	chart	1.7.0	MIT	allowed
temporal	deploy/data/temporal/values.yaml	text	kubernetes	1.32.0	MIT	allowed
temporal	navin-manager/catalog/services/temporal.yaml	navin-manager-catalog	host	1.27.4	MIT	allowed
temporal	deploy/compose/docker-compose.yml (temporal)	compose-image	compose-dev	temporalio/auto-setup:1.25.2	MIT	allowed
temporal-ui	deploy/data/temporal/values.yaml	text	kubernetes	2.54.1	MIT	allowed
temporal-ui	navin-manager/catalog/services/temporal-ui.yaml	navin-manager-catalog	host	2.57.0	MIT	allowed
temporal-ui	deploy/compose/docker-compose.yml (temporal-ui)	compose-image	compose-dev	temporalio/ui:2.32.0	MIT	allowed
tetragon	navin-manager/catalog/services/tetragon.yaml	navin-manager-catalog	host	1.8.0	Apache-2.0	allowed
thanos	deploy/observability/kube-prometheus-stack/values.yaml	text	kubernetes	v0.42.5	Apache-2.0	allowed
tink	services/control-plane/pyproject.toml	text	library	"tink==1.16.1"	Apache-2.0	allowed
tink	navin-manager/catalog/services/tink.yaml	navin-manager-catalog	library	1.16.1	Apache-2.0	allowed
toolhive-operator	deploy/argocd/applicationset.yaml (toolhive-operator)	argocd-chart	chart	0.59.0	Apache-2.0	allowed
toolhive-operator	deploy/argocd/applicationset.yaml (toolhive-operator-crds)	argocd-chart	chart	0.59.0	Apache-2.0	allowed
toolhive-operator	deploy/toolhive/operator-values.yaml (image)	text	kubernetes	harbor.example.internal/mirror/stacklok/toolhive/operator:v0.59.0@sha256:b094d9220a687ef975a62f9c073fa5faf433e88c3f355f8ad29f50cd082e430c	Apache-2.0	allowed
toolhive-operator	deploy/toolhive/operator-values.yaml (toolhiveRunnerImage)	text	kubernetes	harbor.example.internal/mirror/stacklok/toolhive/proxyrunner:v0.59.0@sha256:f0e970f749ef10004d150721311fa8512ba4c349768ca7b1915ff77452750250	Apache-2.0	allowed
trivy	.forgejo/workflows/ci.yml	text	ci	aquasec/trivy:0.58.1	Apache-2.0	allowed
velero	deploy/terraform/modules/platform-bootstrap/variables.tf (velero)	text	chart	"8.1.0"	Apache-2.0	allowed
vllm	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	tag: v0.33.0	Apache-2.0	allowed
vllm	deploy/helm/enterprise-ai/values.yaml	text	kubernetes	tag: v0.33.0-x86_64	Apache-2.0	allowed
vllm	navin-manager/catalog/services/vllm.yaml	navin-manager-catalog	host	0.33.0	Apache-2.0	allowed
vllm	deploy/compose/docker-compose.yml (vllm)	compose-image	compose-dev	vllm/vllm-openai:v0.33.0	Apache-2.0	allowed
yara-x	navin-manager/catalog/services/yara-x.yaml	navin-manager-catalog	host	1.22.1	BSD-3-Clause	exception LEX-023
zap	.forgejo/workflows/ci.yml	text	ci	ghcr.io/zaproxy/zaproxy:2.15.0	Apache-2.0	allowed
zookeeper	deploy/observability/opik/values.yaml	text	kubernetes	"3.9.4@sha256:	Apache-2.0	allowed

Épinglages divergents entre cibles

Composant	Valeurs	Note
alertmanager	v0.34.2, 0.28.1, prom/alertmanager:v0.27.0
alloy	v1.21.3, 1.10.0
clickhouse	25.3.6.10034.altinitystable, 26.3.16.10001.altinitystable, 25.3.3.42, clickhouse/clickhouse-server:24.8
control-plane-api	image: {tag: "1.0.0"}, 1.0.0
jaeger	2.22.0, jaegertracing/jaeger:2.22.0@sha256:836b967b5abcf1f7758066aa6b348619267a2f1459f72d472840570f9bd88a17, 2.22.0
keycloak	"26.8.1", 26.8.1, quay.io/keycloak/keycloak:26.8.1@sha256:a78d6b79572168cb25886b80a8b5b8d4ed4390743e3eecb810538683e209dd6b
litellm	tag: "1.106.5", ${IMAGE_REGISTRY:-harbor.example.internal/eai}/litellm:1.106.5, 1.106.5
livekit	livekit-server:v1.9.0, 1.13.11, livekit/livekit-server:v1.8.0	Kubernetes v1.9.0, host catalogue and voice tooling 1.13.11, compose v1.8.0
nats	2.15.1-alpine, 2.11.17, nats:2.15.1-alpine@sha256:7ae34c25dfd6fe2e01c6483eabef20d796690fdcac6c4d94ca780a6cf9877fde
navin-mcp-host	1.0.0, sha256:4b150b48b4116e2a22f2c39cc27025fbf4f153e2078fd3b14d159fdb5c7279da, sha256:e5b65587bce7de595f299855d7385fe7fca39b8a74baa261ba1b7147afa78e58
node-exporter	v1.12.1, 1.9.1
ollama	tag: "0.40.14", 0.40.14, ollama/ollama:0.40.14	chart (ollama.enabled), Navin Manager (podman method) and compose 0.40.14; LiteLLM routes every call to it (binding ollama of the litellm service, or catalog/providers.yaml for an existing Ollama server)
opa	opa:1.22.0-static, 1.21.4, openpolicyagent/opa:1.0.0-static	Kubernetes 1.22.0, host catalogue 1.21.4, compose and CI 1.0.0
openbao	v2.7.2, 2.7.2, quay.io/openbao/openbao:2.1.0
openfga	v1.22.1, 1.22.1, openfga/openfga:v1.8.1, openfga/openfga:v1.8.1	compose stack still on v1.8.1, Kubernetes and host on v1.22.1
opensearch	"3.9.0@sha256:, 2.19.2, opensearchproject/opensearch:3.9.0@sha256:3b55f6b6249cfdb92b52ee59adc8a266203ba9ef9f5d82544fad6f1af2f3609e
opik	"2.2.137@sha256:7e3174d0, 1.8.16, ghcr.io/comet-ml/opik/opik-backend:2.2.137@sha256:7e3174d0f32fc9d7d77b1af9145e77d715e14eb0d9c0695ecd2543d8f14c825c, ghcr.io/comet-ml/opik/opik-frontend:2.2.137@sha256:29b685c612b2a6f05e356b2ead5e8438afb544f2374d35408ad4258cda2ab905
otel-collector	"0.163.2", 0.130.0, otel/opentelemetry-collector-contrib:0.163.2@sha256:7f22d2a6748110ffb6a59bc0df448bccbf501cdb667d610ede4c61d3863d5849
postgresql	postgresql:16.6, 16.15, postgres:16-alpine
prometheus	v3.15.1-distroless, 3.5.5, prom/prometheus:v3.0.1
qdrant	v1.20.0, 1.14.1, qdrant/qdrant:v1.12.5	Kubernetes v1.20.0, host catalogue 1.14.1, compose v1.12.5: divergent pins
redis	v7.2.17, 7.2.17, redis:7.2.17-alpine@sha256:2c933526722b4126a61d5c170f766dc159adf97682f0b1cbbc27b1666ba96d84	Kubernetes v7.2.17 (BSD-3-Clause, releases redis and redis-opik), host catalogue 7.2.17, compose 7.2.17 by digest
redis-exporter	"v1.44.0", 1.75.0
seaweedfs	chrislusf/seaweedfs:4.51@sha256:f7a49e3f3972ebed5be2ed4befa4a0c68eb7bdddba6e692d42729ceb545134b8, 4.51
temporal	1.32.0, 1.27.4, temporalio/auto-setup:1.25.2	Kubernetes 1.32.0, host catalogue 1.27.4, compose 1.25.2: divergent pins
temporal-ui	2.54.1, 2.57.0, temporalio/ui:2.32.0
toolhive-operator	harbor.example.internal/mirror/stacklok/toolhive/operator:v0.59.0@sha256:b094d9220a687ef975a62f9c073fa5faf433e88c3f355f8ad29f50cd082e430c, harbor.example.internal/mirror/stacklok/toolhive/proxyrunner:v0.59.0@sha256:f0e970f749ef10004d150721311fa8512ba4c349768ca7b1915ff77452750250
vllm	tag: v0.33.0, tag: v0.33.0-x86_64, 0.33.0, vllm/vllm-openai:v0.33.0	chart, Navin Manager (podman method, CUDA image and x86_64 CPU image) and compose v0.33.0; LiteLLM routes every call to it (binding vllm of the litellm service, or catalog/providers.yaml for an existing vLLM server)

Exceptions de licence (approbation du client en attente)

Id	Élément	SPDX	Portée	Statut d'approbation
LEX-001	PostgreSQL	PostgreSQL	provided_by_client, separate_process	pending
LEX-002	Redis	BSD-3-Clause	distributed, separate_process	pending
LEX-003	MySQL (Opik state database)	GPL-2.0-only	provided_by_client, separate_process	pending
LEX-004	HAProxy	GPL-2.0-or-later	distributed, separate_process	pending
LEX-005	Keepalived	GPL-2.0-or-later	distributed, separate_process	pending
LEX-006	OpenBao	MPL-2.0	distributed, separate_process	pending
LEX-007	OpenTofu	MPL-2.0	provided_by_client, separate_process	pending
LEX-008	Forgejo (CI runner and forge)	GPL-3.0-or-later	provided_by_client, separate_process	pending
LEX-009	Wazuh (client SIEM connector)	GPL-2.0-only	provided_by_client, separate_process	pending
LEX-010	FFmpeg and codecs	LGPL-2.1-or-later AND GPL-2.0-or-later	distributed, separate_process	pending
LEX-011	NVIDIA drivers, CUDA and container toolkit	LicenseRef-NVIDIA-Proprietary	provided_by_client, separate_process	pending
LEX-012	Model weights	LicenseRef-Model-Licences	provided_by_client, data_files	pending
LEX-013	psycopg (PostgreSQL driver)	LGPL-3.0-only	distributed, linked	pending
LEX-014	certifi	MPL-2.0	distributed, linked	pending
LEX-015	ldap3	LGPL-3.0-only	distributed, linked	pending
LEX-016	sharp-libvips (Next.js image optimisation of the portal and of the RAG web application)	LGPL-3.0-or-later	distributed, separate_binary	pending
LEX-017	tqdm and orjson (MPL-2.0 files)	MPL-2.0	distributed, linked	pending
LEX-018	pathspec	MPL-2.0	provided_by_client, build_time	pending
LEX-019	Semgrep Community Edition	LGPL-2.1-only	provided_by_client, separate_process	pending
LEX-020	espeak-ng and phonemizer (Kokoro phonemisation)	GPL-3.0-or-later	distributed, separate_process	pending
LEX-021	regex (CNRI-Python part)	Apache-2.0 AND CNRI-Python	distributed, linked	pending
LEX-022	ClamAV	GPL-2.0-only	distributed, separate_process	pending
LEX-023	YARA-X	BSD-3-Clause	distributed, separate_process	pending
LEX-024	Asterisk	GPL-2.0-only WITH Asterisk-linking-protocols-exception	distributed, separate_process	pending
LEX-025	Kamailio	GPL-2.0-or-later	distributed, separate_process	pending
LEX-026	RTPengine	GPL-3.0-or-later	distributed, separate_process	pending
LEX-027	Asterisk sounds and music on hold	CC-BY-SA-3.0	distributed, separate_process	pending
LEX-028	PostgreSQL client and SQLite of the Asterisk nodes	PostgreSQL AND blessing	distributed, separate_process	pending
LEX-029	LiveKit local inference models (end of turn detector and streaming VAD)	Apache-2.0 AND LicenseRef-LiveKit-Model	distributed, linked	pending
LEX-030	FFmpeg libraries bundled in the PyAV wheel	LGPL-3.0-or-later AND GPL-2.0-or-later	distributed, linked	pending
LEX-031	Pillow	MIT-CMU	distributed, linked	pending
LEX-032	Google Chrome in the LiveKit Egress image	LicenseRef-Google-Chrome-Terms	distributed, separate_process	pending
LEX-033	Media codecs in the LiveKit Ingress and Egress images	FDK-AAC AND GPL-2.0-or-later	distributed, separate_process	pending
LEX-034	LemonLDAP::NG	GPL-2.0-or-later	distributed, separate_process	pending

Couverture des capacités du kit (section 3)

Capacité du kit	Composants
API Gateway	apisix (integrated)
Agent Runtime	navin-runtime (integrated)
Alertes	alertmanager (integrated)
Artefact signing	cosign (integrated)
Autoscaling	keda (integrated)
Backup cluster	velero (integrated)
Base vecteurs	qdrant (integrated)
Bus d'événements	nats (integrated)
Cache	redis (integrated)
Certificats	cert-manager (integrated)
Chiffrement applicatif	tink (integrated)
Dashboards	navin-manager-console (integrated)
Diarisation	pyannote-audio (integrated)
Extraction documents	docling (integrated)
Gateway et quotas LLM	litellm (integrated)
Git	gitea (absent)
GitOps	argocd (integrated)
IaC	opentofu (integrated), pulumi (absent)
Identité de workloads et mTLS	spire (integrated)
Inference locale	vllm (integrated)
Install packages	helm (integrated)
Lineage	openlineage (partial)
Logs/SIEM/détection	opensearch (integrated)
Métriques	prometheus (integrated)
OCR	paddleocr (partial)
Orchestrateur	kubernetes (integrated)
PII/anonymisation	presidio (integrated)
Permission ReBAC/FGAC	openfga (integrated)
Pipelines CI	tekton (partial)
Pipelines RAG	haystack (partial)
Policies ABAC/conditions/obligations	opa (integrated)
Policy admission	kyverno (integrated)
Protocole outils	mcp-sdk (absent)
RAG evaluation	ragas (integrated)
Red teaming IA	garak (integrated)
Registry OCI	harbor (partial)
Runtime detection	falco (partial)
Runtime enforcement	tetragon (partial)
Réseau / restrictions egress	cilium (integrated)
SBOM	syft (integrated)
SQL central	postgresql (integrated)
SSO/OIDC/MFA	lemonldap-ng (partial)
SSO/OIDC/SAML/MFA	keycloak (integrated)
STT	faster-whisper (integrated)
Sandbox agents/code	gvisor (partial)
Secrets	client-vault (partial), openbao (integrated)
Storage objet	storage-connector (integrated)
TTS	kokoro (integrated)
Tests IA	promptfoo (integrated)
Traces IA	opik (integrated)
Traces distribuées	jaeger (integrated)
Télémétrie	opentelemetry-sdk (integrated), otel-collector (integrated)
VAD	silero-vad (integrated)
Vision/vidéo	ffmpeg (partial), opencv (absent)
Voix temps réel	livekit (integrated)
Vulnerability scanning	trivy (integrated)
Workflows durables	temporal (integrated)