Images

377 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 377 available now.

A+
uv
Python base image with uv, a fast Rust-based installer and resolver, used as the build stage for Python projects. Line 0.11.
v0.12.2347.2 MB3 versions
Build toolstandardMIT OR Apache-2.0
A+
Valkey
BSD-licensed in-memory key-value store, the truly-open community fork of Redis 7.2. QuenchWorks' default cache and the recommended Redis drop-in…
v9.1.218.4 MB3 versions
CachecriticalBSD-3-Clause
A+
varnish
HTTP reverse-proxy cache (web accelerator) that fronts an origin and serves its responses from memory, cutting backend load and tail latency. Caching…
v9.1.0203.3 MB3 versions
CachestandardBSD-2-Clause
C 2
vault
Secrets and encryption management for tokens, keys, and certificates, with dynamic secrets, leasing, and PKI. Shipped under the Business Source…
v2.1.195.7 MB2 versions
SecretslowBUSL-1.1
D 8
vcluster
vCluster, virtual Kubernetes clusters that run inside a namespace of a host cluster. The syncer is built from source (CGO off, floated modules); the…
v0.37.3112.9 MB3 versions
CI/CD & registrystandardApache-2.0
A+
Vector
High-performance observability pipeline that collects, transforms, and routes logs, metrics, and traces between sources and sinks.
v0.59.033.9 MB2 versions
ObservabilitystandardMPL-2.0
A 1
velero
CNCF backup and disaster-recovery tool for Kubernetes cluster resources and persistent volumes. Single static Go binary on a hardened nonroot Wolfi…
v1.18.431.2 MB
Storage & platformstandardApache-2.0
A+
velero-plugin-for-aws
Velero's object-store and volume-snapshot plugin for AWS S3 and S3-compatible stores (SeaweedFS, Garage, RustFS, MinIO). Built from source; runs as…
v1.14.423.0 MB
Storage & platformstandardApache-2.0
A 1
versitygw
Versity S3 Gateway, an S3-compatible API server that fronts a POSIX filesystem, another S3 service or Azure Blob, with IAM accounts and a built-in…
v1.8.014.5 MB3 versions
Object storagestandardApache-2.0
A+
vertical-pod-autoscaler
Vertical Pod Autoscaler: the recommender, updater and admission-controller that size pod CPU and memory requests from observed usage. All three built…
v1.8.032.8 MB3 versions
CoordinationstandardApache-2.0
A+
victorialogs
Fast, cost-efficient logs database with the LogsQL query language. Single static Go binary on a hardened nonroot Wolfi base; log data lives on a…
v1.53.010.2 MB2 versions
ObservabilitystandardApache-2.0
A+
VictoriaMetrics
Fast, cost-efficient time-series database that speaks PromQL and Prometheus remote_write. Drop-in long-term storage or full replacement for…
v1.153.011.2 MB
Time serieslowApache-2.0