helmforge/opencut repository overview

⁠helmforge/opencut

Production-ready OpenCut container image for HelmForge deployments.

This image packages OpenCut, an open-source CapCut alternative, into a clean and Kubernetes-ready runtime designed for Docker, Helm charts, CI/CD pipelines and GitOps-based deployments.

⁠Features

• OpenCut web application
• Open-source video editor for web, desktop and mobile workflows
• Packaged from the official OpenCut-app/OpenCut upstream source
• Multi-architecture support: linux/amd64 and linux/arm64
• Runs as non-root opencut user by default
• Runtime exposed on port 3000
• No embedded credentials
• No external database required by default
• Signed image
• SBOM available
• Built for HelmForge deployments
• Suitable for Docker, Kubernetes and GitOps workflows

⁠Quick usage

docker pull docker.io/helmforge/opencut:latest

Run locally:

docker run --rm -p 3000:3000 docker.io/helmforge/opencut:latest

Access:

• Web editor: http://localhost:3000

⁠Kubernetes usage

This image is intended to be used with HelmForge Kubernetes deployments.

helm repo add helmforge https://repo.helmforge.dev

For production deployments, expose the application through an Ingress Controller, Gateway API, CDN or reverse proxy with HTTPS enabled.

Recommended production setup:

• Run behind HTTPS
• Use pinned image tags instead of latest
• Configure resource requests and limits
• Enable container security context with non-root execution
• Expose the application through a controlled ingress layer
• Add external observability through Kubernetes metrics, logs and ingress access logs

⁠Runtime

Default container port:

• 3000

Example:

docker run --rm -p 3000:3000 docker.io/helmforge/opencut:latest

⁠Tags

• latest — latest published HelmForge OpenCut image
• v0.3.0 — pinned upstream OpenCut release image
• 0.3.0 — pinned upstream OpenCut release image without v prefix
• <version> — pinned HelmForge image version

For production workloads, prefer pinning a specific version instead of using latest.

docker pull docker.io/helmforge/opencut:<version>

⁠Security

This image follows a security-first runtime approach:

• Non-root runtime user
• No embedded credentials
• Minimal application runtime
• Runtime configuration through container environment when applicable
• Image signing
• SBOM generation
• Multi-architecture build pipeline
• Suitable for Kubernetes security contexts and GitOps-based deployments

⁠Source

Image source:

https://github.com/helmforgedev/opencut⁠

Upstream project:

https://github.com/opencut-app/opencut⁠

⁠Maintained by HelmForge

Part of the HelmForge ecosystem: lightweight, transparent and production-ready tooling for Kubernetes operations.