Images

390 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 390 available now.

A+
hubble-relay
Hubble Relay, Cilium's cluster-wide aggregator of Hubble network-flow observability (one Observer API across every node). Built from the…
v1.20.221.8 MB3 versions
Coordination & meshstandardApache-2.0
A+
hubble-ui
Hubble UI, Cilium's web UI for the service map and live network flows. The React frontend built from source and served by a Wolfi nginx that proxies…
v0.13.611.9 MB
Coordination & meshstandardApache-2.0
A+
hubble-ui-backend
The Hubble UI backend, the Go service that reads flows and the service map from Hubble Relay and streams them to the Hubble UI. Built from source.…
v0.13.621.4 MB
Coordination & meshstandardApache-2.0
D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
v26.2.015.0 MB2 versions
IdentitystandardApache-2.0
A 1
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
v2.9.155.8 MB
Time seriesstandardMIT
A+
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
v1.15.1080.0 MB
GatewaystandardApache-2.0
A 1
istio-proxyv2
Istio's sidecar and gateway data plane. pilot-agent built from the istio/istio source, paired with Istio's own Envoy (the Wolfi istio-envoy build at…
v1.31.154.5 MB
Coordination & meshstandardApache-2.0
A 1
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
v1.31.133.2 MB3 versions
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
v2.22.026.8 MB2 versions
ObservabilitystandardApache-2.0
A+
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
v25.0.4.1112.2 MB3 versions
Language runtimestandardGPL-2.0-with-classpath-exception
C 1
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
v2.580.1130.9 MB2 versions
CI/CD & registrystandardMIT
A 1
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
v2.566166.9 MB3 versions
CI/CD & registrystandardMIT