Helm Feeds

[phumberdroz]

I would like to propose to add helm charts to the feeds as well.

There is a complication as there is no central repository for all charts. There is an aggregator with artifacthub (CNCF sandbox project) which provides an endpoint for all the registries it currently gets data from. (currently 616 registries)

Artifacthub itself provides an api to get packages and version information but it seems like there is no support for getting newly released / updated charts only.

There is a couple of ways we could achieve this:
1)
Have a predefined list of repositories (e.g. nginx-ingress, prometheus-community, jetstack, elastic, openfaas, bitnami)
2)
Grab all registries from artifact hub and check all of them for new releases.

I believe that 2) is the better one to find charts that are typo squatting and similar things.