Images
4 imagesRuntime base images
Hardened container images in the runtime base category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.
0 CVE
aspnet
Hardened ASP.NET Core runtime for web apps and APIs, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
image v9.0.121, 10.0.112
Runtime basestandardMIT0 CVE
dotnet-runtime
Hardened .NET runtime for console and worker apps, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
image v10.0.112, 9.0.121
Runtime basestandardMIT0 CVE
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
image v21.0.12.1, 25.0.4.1, 17.0.20.1
Runtime basestandardGPL-2.0-with-classpath-exception0 CVE
static
Tiny static base for self-contained binaries from Go or Rust. Nonroot, no shell, no package manager. The only image tagged :latest.
image v20260621
Runtime basestandardMIT