Images

12 images

Identity images

Hardened container images in the identity category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
authelia
Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion…
image v4.39.28
IdentitystandardApache-2.0
0 CVE
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
image v2.45.1
IdentitystandardApache-2.0
0 CVE
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
image v25.4.0, 26.2.0
IdentitystandardApache-2.0
0 CVE
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
image v26.8.0, 26.7.5
IdentitystandardApache-2.0
0 CVE
kratos
Ory Kratos, an identity and user-management server covering registration, login, MFA, account recovery and profile self-service. Headless by design…
image v26.2.0, 25.4.0
IdentitystandardApache-2.0
0 CVE
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
image v1.22.0, 1.21.0
IdentitystandardApache-2.0
0 CVE
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
image v2.6.14, 2.7.1
IdentitystandardOLDAP-2.8
0 CVE
ory-hydra
Ory Hydra, the OAuth 2.0 and OpenID Connect provider. Built from source like upstream's Linux release (cgo, sqlite, hsm, json1); one binary serves…
image v26.2.0
IdentitystandardApache-2.0
0 CVE
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
image v0.47.0
IdentitystandardApache-2.0
0 CVE
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
image v1.56.2
IdentitystandardApache-2.0
0 CVE
spire
SPIRE, the SPIFFE runtime that attests nodes and workloads and issues them short-lived X.509 and JWT identities (spire-server and spire-agent in one…
image v1.15.3
IdentitystandardApache-2.0
0 CVE
zitadel
Cloud-native identity and access management (IAM) with OIDC/OAuth2/SAML, multi-tenancy, and a built-in admin console. Packaged from ZITADEL's…
image v4.19.4
IdentitystandardAGPL-3.0