Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A+
hasura
Hasura GraphQL Engine, an instant GraphQL API with permissions over PostgreSQL. The Apache-2.0 Community Edition server and console, taken by digest…
v2.50.346.2 MB3 versions
Databases & enginesstandardApache-2.0
A 1
headscale
Open-source, self-hosted implementation of the Tailscale control server for coordinating a WireGuard mesh. Single static Go binary on a hardened…
v0.29.419.9 MB
Coordination & meshstandardBSD-3-Clause
D 1
homepage
Homepage, a services and bookmarks dashboard with live widgets for hundreds of self-hosted apps. A Next.js app built from source into its standalone…
v2.4.075.6 MB
Apps & productivitystandardGPL-3.0
A+
httpd
Apache HTTP Server, the long-standing open-source web server and reverse proxy for serving static content and fronting application backends…
v2.4.6935.5 MB
GatewaycriticalApache-2.0
A+
hubble-relay
Hubble Relay, Cilium's cluster-wide aggregator of Hubble network-flow observability (one Observer API across every node). Built from the…
v1.20.221.8 MB3 versions
Coordination & meshstandardApache-2.0
A+
hubble-ui
Hubble UI, Cilium's web UI for the service map and live network flows. The React frontend built from source and served by a Wolfi nginx that proxies…
v0.13.611.9 MB
Coordination & meshstandardApache-2.0
A+
hubble-ui-backend
The Hubble UI backend, the Go service that reads flows and the service map from Hubble Relay and streams them to the Hubble UI. Built from source.…
v0.13.621.4 MB
Coordination & meshstandardApache-2.0
D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
v26.2.015.0 MB2 versions
IdentitystandardApache-2.0
A 1
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
v2.9.155.8 MB
Time seriesstandardMIT
A+
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
v1.15.1080.0 MB
GatewaystandardApache-2.0
A 1
istio-proxyv2
Istio's sidecar and gateway data plane. pilot-agent built from the istio/istio source, paired with Istio's own Envoy (the Wolfi istio-envoy build at…
v1.31.154.5 MB
Coordination & meshstandardApache-2.0
A 1
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
v1.31.133.2 MB3 versions
Coordination & meshstandardApache-2.0