Images

392 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 392 available now.

A 2
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
v2.14.561.5 MB
Coordination & meshstandardApache-2.0
A+
kured
kured, the Kubernetes reboot daemon: it watches each node for a reboot-required sentinel and reboots nodes one at a time behind a lock, draining them…
v1.23.028.4 MB3 versions
CoordinationstandardApache-2.0
A+
kvrocks
Apache Kvrocks, a distributed key-value database on RocksDB that speaks the Redis protocol, keeping data on disk instead of in RAM. Built from source…
v2.17.024.7 MB
CachestandardApache-2.0
A 6
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
v1.19.1256.1 MB
Security & supply chainstandardApache-2.0
D 1
label-studio
Label Studio, the open-source data labeling tool for text, images, audio, video and time series, with a web UI and a token-authenticated REST API.…
v1.23.2339.6 MB
Machine learning & AIstandardApache-2.0
A 1
linkerd-control-plane
Linkerd's control plane `controller` binary (destination, identity, proxy-injector, sp-validator, service-mirror, heartbeat -- one binary, role…
v26.9.320.5 MB3 versions
Coordination & meshstandardApache-2.0
A+
linkerd-policy-controller
Linkerd's Rust policy controller (policy-controller), serving Linkerd's authorization-policy CRDs to the proxy data plane over gRPC. Built from…
v26.9.314.6 MB3 versions
Coordination & meshstandardApache-2.0
A+
linkerd-proxy
linkerd2-proxy, Linkerd's Rust data-plane sidecar (mTLS termination and meshed traffic routing) -- a from-scratch Rust proxy with no bundled C++…
v2.369.013.5 MB3 versions
Coordination & meshstandardApache-2.0
A+
litellm
LiteLLM proxy, one OpenAI-compatible API to call, route, budget and log 100+ LLM providers. MIT build from PyPI in a Python 3.13 venv on a hardened…
v1.104.1178.0 MB2 versions
AI gatewaystandardMIT
A 1
litestream
Streaming replication for SQLite databases to object storage such as S3, GCS, and Azure. Image only, no chart.
v0.5.1720.8 MB
Storage & platformstandardApache-2.0
A 1
livekit
WebRTC SFU server for scalable real-time audio, video, and data. Single static Go binary on a hardened nonroot Wolfi base; config via mounted YAML or…
v1.13.919.4 MB
Media & streamingstandardApache-2.0
A 2
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
v3.7.888.6 MB
ObservabilitystandardAGPL-3.0