Images
Hardened container images
Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest. Nonroot, read-only rootfs, amd64 + arm64. 28 available now.
-
0 CVE Cassandra
Distributed wide-column store built for linear scale and availability.
image v5.0.8
Wide-column standard Apache-2.0 - 0 CVE
ClickHouse
Column-oriented database for real-time analytics over large datasets.
image v26.3.13.31
Analytical standard Apache-2.0 - 0 CVE
CockroachDB
Distributed Postgres-wire SQL. Source-available (BSL) — no clean in-catalog substitute yet.
image v25.4.11
Relational low BUSL-1.1 - 0 CVE
CouchDB
Document database with an HTTP API and multi-master replication.
image v3.5.2
Document standard Apache-2.0 - 0 CVE
DocumentDB
Self-contained MongoDB-compatible server (PostgreSQL + DocumentDB extension + wire gateway). Truly open.
image v0.112.0
Document standard MIT - 0 CVE
Dragonfly
Multi-threaded Redis/Memcached-compatible datastore. Source-available (BSL) — prefer Valkey.
image v1.39.0
Cache low BUSL-1.1 - 0 CVE
Elasticsearch
Search and analytics engine. SSPL/Elastic license; OpenSearch is the OSI alternative.
image v9.4.2
Search low SSPL-1.0 - 0 CVE
etcd
Distributed, strongly consistent key-value store for coordination and config.
image v3.6.12
Coordination critical Apache-2.0 - 0 CVE
FerretDB
MongoDB-compatible document database built on PostgreSQL. The clean-license substitute for MongoDB.
image v2.7.0
Document standard Apache-2.0 - 0 CVE
InfluxDB
Time-series database for metrics and events.
image v2.7.12
Time series standard MIT - 0 CVE
Kafka
Distributed event-streaming platform.
image v4.3.0
Messaging critical Apache-2.0 - 0 CVE
MariaDB
Community-developed relational database, a drop-in MySQL successor.
image v11.8.8
Relational critical GPL-2.0 - 0 CVE
Memcached
High-performance distributed memory object cache.
image v1.6.42
Cache standard BSD-3-Clause - 0 CVE
MongoDB
Document database. SSPL is not OSI; prefer FerretDB or DocumentDB.
image v8.0.26
Document standard SSPL-1.0 - 0 CVE
MySQL
Widely used open-source relational database.
image v9.7.0
Relational critical GPL-2.0 - 0 CVE
NATS
Lightweight, high-performance messaging system.
image v2.14.2
Messaging standard Apache-2.0 - 0 CVE
Neo4j
Graph database for connected data. Community edition is GPLv3.
image v2026.05.0
Graph low GPL-3.0 - 0 CVE
OpenSearch
Search and analytics suite. The Apache-licensed alternative to Elasticsearch.
image v3.7.0
Search standard Apache-2.0 - 0 CVE
PostgreSQL
Advanced open-source relational database with strong SQL and extensibility.
image v18.4
Relational critical PostgreSQL - 0 CVE
PostgreSQL + DocumentDB
PostgreSQL 17 + DocumentDB extension — the FerretDB v2 storage backend.
image v0.107.0
Document standard MIT - 0 CVE
Pulsar
Cloud-native distributed messaging and streaming.
image v4.0.11
Messaging low Apache-2.0 - 0 CVE
RabbitMQ
Reliable message broker supporting AMQP and more.
image v4.3.1
Messaging critical MPL-2.0 - 0 CVE
Redis
In-memory key-value store and cache. Shipped under AGPL; Valkey is the BSD alternative.
image v8.8.0
Cache critical AGPL-3.0 - 0 CVE
ScyllaDB
High-throughput wide-column store, Cassandra-compatible.
image v2026.1.5
Wide-column low AGPL-3.0 - 0 CVE
Solr
Search platform built on Apache Lucene.
image v10.0.0
Search low Apache-2.0 - 0 CVE
Valkey
BSD-licensed in-memory key-value store. QuenchWorks leads with Valkey as the open cache.
image v9.1.0
Cache critical BSD-3-Clause - 0 CVE
VictoriaMetrics
Fast, cost-effective time-series database and monitoring backend.
image v1.145.0
Time series low Apache-2.0 - 0 CVE
ZooKeeper
Centralized service for configuration, naming, and synchronization.
image v3.9.5
Coordination standard Apache-2.0 - Planned
nginx
High-performance web server and reverse proxy.
Gateway critical BSD-2-Clause