Images
4 imagesRuntime base images
Hardened container images in the runtime base category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.
0 CVE
aspnet
Hardened ASP.NET Core runtime for web apps and APIs, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
image v9.0.119, 8.0.127, 10.0.110
Runtime basestandardMIT0 CVE
dotnet-runtime
Hardened .NET runtime for console and worker apps, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
image v9.0.119, 10.0.110, 8.0.127
Runtime basestandardMIT0 CVE
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
image v21.0.11, 17.0.19, 25.0.4
Runtime basestandardGPL-2.0-with-classpath-exception0 CVE
static
Tiny static base for self-contained binaries from Go or Rust. Nonroot, no shell, no package manager. The only image tagged :latest.
image v20260621
Runtime basestandardMIT