Images

392 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 392 available now.

A+
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
v2.4.659.1 MB2 versions
GatewaystandardApache-2.0
A 1
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
v0.19.195.3 MB2 versions
Security & supply chainstandardApache-2.0
A+
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
v3.9.342.5 MB
GatewaystandardApache-2.0
A 1
krakend
Stateless, declarative API gateway that aggregates and transforms backend responses from a single JSON config. Built from the community…
v3.0.023.9 MB2 versions
GatewaystandardApache-2.0
D 2
kratos
Ory Kratos, an identity and user-management server covering registration, login, MFA, account recovery and profile self-service. Headless by design…
v26.2.018.7 MB2 versions
IdentitystandardApache-2.0
A 1
kserve-controller
The KServe controller manager, which turns InferenceService resources into model-serving Deployments with autoscaling and canary rollouts. Built from…
v0.21.022.3 MB
Machine learning & AIstandardApache-2.0
A 1
kube-state-metrics
Exposes the state of Kubernetes objects as Prometheus metrics for dashboards and alerts.
v2.20.018.6 MB3 versions
ObservabilitystandardApache-2.0
A 1
kube-vip
kube-vip, virtual IPs and load balancing for the Kubernetes control plane and for Services of type LoadBalancer, by ARP or BGP. Built from the…
v1.2.418.6 MB3 versions
Coordination & meshstandardApache-2.0
A 2
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
v1.37.154.0 MB2 versions
CI/CD & registrystandardApache-2.0
A+
kuberay
KubeRay, the operator that runs Ray clusters, jobs and services on Kubernetes (RayCluster, RayJob, RayService). Built from source, static Go…
v1.7.112.2 MB3 versions
Machine learning & AIstandardApache-2.0
0 CVE
kubescape
Kubescape CLI, the Kubernetes security scanner for posture (NSA-CISA, MITRE, CIS frameworks), misconfigurations and image vulnerabilities, against a…
v4.0.1564.4 MB
Security & supply chainstandardApache-2.0
A 1
kubo
Kubo, the reference IPFS node, for content-addressed storage and retrieval (RPC API, HTTP gateway, libp2p swarm over TCP and QUIC). Built from source…
v0.43.127.1 MB3 versions
Object storagestandardMIT OR Apache-2.0