Images

377 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 377 available now.

A 4
buildkit
BuildKit, the concurrent container image build engine behind docker build, as the rootless variant: buildkitd runs under rootlesskit as uid 1001 on…
v0.33.182.5 MB3 versions
Security & supply chainstandardApache-2.0
A 1
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
v4.2.116.0 MB3 versions
CI/CD & registrystandardMIT
A+
bun
Hardened Bun runtime and toolkit (runtime, bundler, package manager) for JavaScript and TypeScript. Latest stable (1).
v1.4.238.8 MB3 versions
Language runtimestandardMIT
A+
BusyBox
Hardened minimal base/toolbox image bundling common Unix utilities in one binary. Image only, no chart.
v1.38.04.2 MB3 versions
Base imagelowGPL-2.0
A 1
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
v2.11.723.9 MB
GatewaystandardApache-2.0
A 2
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi…
v1.4.265.2 MB
WorkflowstandardMIT
A 1
cadvisor
Analyzes resource usage and performance characteristics of running containers. Image only, no chart.
v0.60.610.4 MB
ObservabilitystandardApache-2.0
A+
Cassandra
Distributed wide-column NoSQL store built for linear horizontal scale and high availability with no single point of failure, tuned for heavy writes.
v5.0.9142.3 MB
Wide-columnstandardApache-2.0
A 1
centrifugo
Scalable real-time messaging server (WebSocket, SSE, GRPC) with channels, presence, and JWT auth. Built from source as a static Go binary on a…
v6.9.723.5 MB
MessagingstandardApache-2.0
0 CVE
ceph
Ceph, the distributed object, block and file store (mon, mgr, osd, mds, radosgw, rbd-mirror, exporter), from Wolfi's ceph-20 (Tentacle) packages…
v20.2.4387.1 MB
Storage & platformstandardLGPL-2.1
A+
cert-manager-acmesolver
acmesolver component of cert-manager. The minimal HTTP server cert-manager runs as ephemeral pods to answer ACME http-01 challenge requests during…
v1.21.25.8 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and…
v1.21.211.6 MB3 versions
Security & supply chainstandardApache-2.0