Imágenes

200 images

Imágenes de contenedor reforzadas

Cada imagen se compila desde el código fuente en Wolfi, se analiza hasta cero CVE corregibles, se firma con cosign y se fija por digest, con un SBOM SPDX y una atestación de procedencia de compilación SLSA que puedes verificar. Sin root, rootfs de solo lectura, amd64 + arm64. 200 disponibles ahora.

A+
adminer
vrana's single-file PHP database manager, a web UI for MySQL/MariaDB, PostgreSQL, and SQLite, served by a hardened PHP runtime. Image only, no chart.
v5.5.115.6 MB3 versiones
Aplicaciones y productividadstandardApache-2.0
D 1
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.
v3.3.0113.6 MB2 versiones
Flujo de trabajostandardApache-2.0
B 2
Alertmanager
Complemento de Prometheus que enruta, agrupa, deduplica y silencia alertas y las envía a correo electrónico, Slack, PagerDuty y más.
v0.33.124.2 MB
ObservabilidadstandardApache-2.0
D 2
ansible
Ansible — agentless IT automation and configuration management (the community `ansible` package plus ansible-core and curated collections) with ssh/git/rsync/sshpass tooling, ready to run playbooks. Built from source into a venv on a hardened nonroot Wolfi base. Image only, no chart.
v14.2.0127.0 MB2 versiones
CI/CD y registrostandardGPL-3.0+
D 4
argo-workflows
Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller and the argo CLI/API server with an embedded React UI, built from source on a hardened nonroot Wolfi base.
v3.7.1564.4 MB
Flujo de trabajostandardApache-2.0
D 10
argocd
Argo CD, the CNCF declarative GitOps continuous-delivery controller for Kubernetes. One multi-call binary serves every component (server, repo-server, application-controller, applicationset-controller, commit-server, notifications, cmp-server), selected by argv[0] exactly as upstream does, so the chart picks a role with a single command. Built from source with upstream's own asset pipeline, so the server really serves its React web console instead of 404ing every UI route. Ships git, git-lfs, openssh-client and gnupg for private and signature-verified repos, plus Helm 3 built from source and the Wolfi Kustomize, both of which the repo-server execs by bare name.
v3.4.6106.0 MB3 versiones
GitOpsstandardApache-2.0
A+
aspnet
Runtime reforzado de ASP.NET Core para aplicaciones web y APIs, sin SDK. Compila sobre la imagen dotnet y luego ejecuta aquí. Líneas 8/9/10.
v10.0.11072.2 MB3 versiones
Base de ejecuciónstandardMIT
D 4
Atlantis
Automatización de pull requests para Terraform que ejecuta plan en los PRs y apply desde los comentarios del PR, imponiendo cambios de infraestructura revisados y gestionados con Git, con bloqueo de estado.
v0.46.074.5 MB
GitOpsstandardApache-2.0
B 1
authelia
Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion for reverse proxies. Packaged from Authelia's official prebuilt binary; needs a config plus a SQLite or PostgreSQL storage backend.
v4.39.2021.7 MB
IdentidadstandardApache-2.0
D 11
authentik
Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on Wolfi as a four-language image (nodejs web UI, Go server/proxy, Rust worker, Python/Django core via uv) on a hardened nonroot base; FIPS mode is not forced and the license-gated MaxMind GeoIP download is omitted. Needs PostgreSQL and Redis at runtime, provided by the chart.
v2026.5.6229.7 MB
Secretos e identidadstandardMIT
B 1
blackbox-exporter
Exportador de Prometheus que sondea endpoints externamente sobre HTTP, HTTPS, TCP, DNS e ICMP para la supervisión de disponibilidad y latencia de caja negra.
v0.28.08.9 MB
Métricas/ExportadorstandardApache-2.0
B 1
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
v3.135.016.6 MB3 versiones
CI/CD y registrostandardMIT