Images

13 images

Language runtime images

Hardened container images in the language runtime category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
bun
Hardened Bun runtime and toolkit (runtime, bundler, package manager) for JavaScript and TypeScript. Latest stable (1).
image v1.3.13, 1.3.14, 1.3.11
Language runtimestandardMIT
0 CVE
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Latest stable (2).
image v2.9.4
Language runtimestandardMIT
0 CVE
dotnet
Hardened .NET SDK for building and running .NET apps. Use as a build base; ships the current LTS line (10). Image only, no chart.
image v10.0.110
Language runtimestandardMIT
0 CVE
elixir
Hardened Elixir runtime on the BEAM VM, built on Erlang/OTP, for concurrent, fault-tolerant apps (e.g. Phoenix). Latest stable (1.18).
image v1.18.4, 1.19.5, 1.17.3
Language runtimestandardApache-2.0
0 CVE
erlang
Hardened Erlang/OTP runtime on the BEAM VM, built for highly concurrent, fault-tolerant systems. Latest stable lines (27/28/29).
image v28.5.0.4, 29.0.4, 27.3.4.15
Language runtimestandardApache-2.0
0 CVE
go
Hardened Go toolchain for compiling binaries in a build stage; pair the output with the static base for the runtime. Latest 3 stable lines (1.24/1.25/1.26).
image v1.26.5
Language runtimestandardBSD-3-Clause
0 CVE
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
image v17.0.19, 21.0.11, 25.0.4
Language runtimestandardGPL-2.0-with-classpath-exception
0 CVE
node
Hardened Node.js runtime with npm, a 0-CVE signed nonroot base image for JavaScript apps. Active LTS lines (20/22/24).
image v22.23.1, 24.18.1, 26.5.1
Language runtimestandardMIT
0 CVE
perl
Hardened Perl interpreter for scripts, text processing, and tooling. A base image to FROM for Perl workloads. Latest stable (5).
image v5.44.0
Language runtimestandardArtistic-1.0-Perl OR GPL-1.0+
0 CVE
php
Hardened PHP CLI with common extensions, a base image to FROM for PHP apps. Latest 3 stable lines (8.3/8.4/8.5).
image v8.5.9, 8.4.24, 8.3.33
Language runtimestandardPHP-3.01
0 CVE
python
Hardened CPython interpreter with pip, a 0-CVE signed nonroot base image to FROM for Python apps. Ships the latest 3 stable minors (no :latest).
image v3.13.14, 3.12.13, 3.14.6
Language runtimestandardPSF-2.0
0 CVE
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
image v3.4.10
Language runtimestandardRuby