Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

F 6
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
v44.133.0125.6 MB
CI/CD & registrystandardAGPL-3.0
A+
rethinkdb
RethinkDB, the realtime document database with changefeeds that push query results to clients as data changes, plus a web admin UI. From Wolfi's…
v2.4.428.2 MB
Databases & enginesstandardApache-2.0
A 1
rook
The Rook Ceph operator, which runs Ceph clusters on Kubernetes (block, object and file storage through CRDs). Built from source with its vulnerable…
v1.21.0416.8 MB
Storage & platformstandardApache-2.0
A 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
v10.5.219.2 MB3 versions
RelationalstandardMIT
A+
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
v4.0.729.0 MB2 versions
Language runtimestandardRuby
A+
rust
Hardened Rust toolchain (cargo plus rustc) for build stages; ship the compiled binary on the static base. Latest 3 stable lines (1.94/1.95/1.96).
v1.99.0369.1 MB2 versions
Language runtimestandardMIT OR Apache-2.0
A+
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative.…
v1.0.0_beta1282.7 MB3 versions
Object storagelowApache-2.0
A+
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
v2026.3.380.6 MB
Wide-columnlowAGPL-3.0
A 1
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
v0.40.015.8 MB3 versions
Security & supply chainstandardApache-2.0
A 1
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small…
v4.4851.7 MB
Object storagestandardApache-2.0
A+
shellcheck
Static analysis for shell scripts. Flags quoting bugs, unsafe globbing, and portability issues in sh and bash; pipe a script in with "-" or mount a…
v0.11.04.0 MB
CI/CD & registrystandardGPL-3.0
A 1
skopeo
Skopeo, the daemonless CLI to inspect, copy, sync and delete container images between registries and storage transports. Built from source (static…
v1.24.110.2 MB
Security & supply chainstandardApache-2.0