Imágenes

200 images

Imágenes de contenedor reforzadas

Cada imagen se compila desde el código fuente en Wolfi, se analiza hasta cero CVE corregibles, se firma con cosign y se fija por digest, con un SBOM SPDX y una atestación de procedencia de compilación SLSA que puedes verificar. Sin root, rootfs de solo lectura, amd64 + arm64. 200 disponibles ahora.

A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich observability, and an admin/health endpoint. The chart supplies the bootstrap config.
v1.38.146.3 MB3 versiones
Puerta de enlacestandardApache-2.0
A+
erlang
Runtime Erlang/OTP reforzado sobre la máquina virtual BEAM, diseñado para sistemas altamente concurrentes y tolerantes a fallos. Últimas líneas estables (27/28/29).
v29.0.463.1 MB3 versiones
Entorno de ejecución de lenguajestandardApache-2.0
B 2
etcd
Almacén de clave-valor distribuido y fuertemente consistente que usa el consenso Raft. El almacén de respaldo de Kubernetes y un componente básico para la coordinación de servicios y la configuración.
v3.7.121.5 MB
CoordinacióncriticalApache-2.0
A+
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or account required.
v0.18.128.4 MB
Aplicaciones y productividadstandardMIT
B 1
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically. Image only, no chart.
v0.21.033.6 MB
Coordinación y mallastandardApache-2.0
B 1
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into Kubernetes Secrets. The single controller binary also serves the webhook and cert-controller, with every provider compiled in.
v2.8.051.8 MB
Seguridad y cadena de suministrostandardApache-2.0
B 1
FerretDB
Base de datos de documentos compatible con MongoDB que traduce el protocolo de MongoDB a PostgreSQL mediante la extensión DocumentDB. El sustituto con licencia limpia de MongoDB.
v2.7.010.2 MB
DocumentalstandardApache-2.0
F 3
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi base; data and served roots are volumes.
v2.63.1815.6 MB2 versiones
Aplicaciones y productividadstandardApache-2.0
A+
floci
Local AWS cloud emulator and LocalStack Community successor, built from source into a Quarkus fast-jar on a hardened Wolfi JRE. The hardened image runs all 55 of Floci's in-process AWS services nonroot with no Docker socket, covering S3, DynamoDB, SQS, SNS, SES, IAM, STS, KMS, Secrets Manager, API Gateway, Cognito, Kinesis, CloudFormation, Step Functions, EventBridge, CloudWatch, Route53, and more. The 10 Docker-backed services (Lambda, RDS, ElastiCache, MSK, ECS, EKS, OpenSearch, ECR, DocumentDB, Neptune) need the host Docker socket plus root and are out of scope for this image.
v1.5.34191.3 MB
Aplicaciones y productividadstandardMIT
D 1
floci-full
Opt-in, NON-hardened companion to the floci image: it runs as root and expects the host Docker socket mounted, which lets it emulate all 65 of Floci's AWS services including the 10 Docker-backed ones (Lambda, RDS, ElastiCache, MSK, ECS, EKS, OpenSearch, ECR, DocumentDB, Neptune). Same from-source Quarkus build and 0-CVE Trivy gate as floci, but running root with a mounted /var/run/docker.sock is a node-root / container-escape surface, so use it only in trusted single-tenant dev or CI. The floci Helm chart selects this image via mode=full behind an explicit acknowledgeRisk gate. Image only, no separate chart.
v1.5.29190.8 MB
Aplicaciones y productividadstandardMIT
A+
Fluent Bit
Procesador y reenviador de logs y métricas ligero y rápido para recopilar, filtrar y enviar telemetría a numerosos backends.
v5.0.935.2 MB
ObservabilidadstandardApache-2.0
C 2
forgejo
Self-hosted lightweight Git forge (a community Gitea fork) with issues, PRs, CI, and packages. From source with the web UI embedded (no Node at runtime), CGO+static-musl SQLite, on a hardened nonroot Wolfi base; data lives on a writable volume.
v15.0.368.6 MB
GitstandardGPL-3.0+