Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

D 4
ghost
Open-source Node.js publishing platform for blogs, newsletters, and membership sites. Packaged from Ghost's official npm distribution on a hardened…
v6.69.0193.6 MB2 versions
Apps & productivitystandardMIT
A 1
Gitea
Lightweight self-hosted Git service with repositories, issues, pull requests, and built-in CI/CD (Actions). A low-footprint GitHub alternative.
v28.1.071.2 MB2 versions
GitstandardMIT
A 1
gitlab-runner
GitLab Runner, the agent that runs GitLab CI jobs, here for the Kubernetes executor. Built from source (static Go, golang.org/x and otel floated)…
v19.4.132.7 MB3 versions
CI/CD & registrystandardMIT
A 1
gitleaks
Gitleaks, the secret scanner for git history, directories and stdin. Built from source (static Go) with the git client included for history scans.…
v8.30.133.3 MB
Security & supply chainstandardMIT
A 1
gitness
Self-hosted Git forge with built-in CI/CD pipelines (harness/gitness, open-source edition). Go backend with the React web UI compiled in via…
v3.3.061.5 MB
GitstandardApache-2.0
A+
go
Hardened Go toolchain for compiling binaries in a build stage; pair the output with the static base for the runtime. Latest 3 stable lines…
v1.27.156.1 MB2 versions
Language runtimestandardBSD-3-Clause
A 1
gogs
Gogs, the painless self-hosted Git service (repositories, issues, pull requests, wikis, webhooks, built-in SSH). Built from source with the…
v0.14.357.8 MB
GitstandardMIT
A 1
gotify
Self-hosted server for sending and receiving real-time push messages over WebSocket, with a web UI and app tokens. From source (UI embedded,…
v3.1.113.9 MB
MessagingstandardMIT
A+
gradle
JDK base image with Gradle, used as the build stage for Gradle projects; run the resulting jar on jre. Line 9.
v9.8.1245.8 MB
Build toolstandardApache-2.0
A 1
Grafana
Dashboards and visualization for metrics, logs, and traces across many data sources. OSS edition, licensed AGPL.
v13.1.6265.4 MB
ObservabilitystandardAGPL-3.0
C 2
grafana-alloy
OpenTelemetry Collector distribution that collects, transforms, and ships logs, metrics, traces, and profiles, configured in Grafana's Alloy syntax.…
v1.20.1114.8 MB2 versions
ObservabilitystandardApache-2.0
C 1
graylog
Graylog, the log-management and analysis server (search, dashboards, alerting, GELF/Beats inputs). Built clean-room on a hardened Wolfi JRE (nonroot,…
v7.1.10425.7 MB
ObservabilitystandardSSPL-1.0