Images

377 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 377 available now.

A 1
cert-manager-controller
Core controller of cert-manager, the CNCF standard for X.509 certificate management on Kubernetes. Reconciles Certificate, Issuer, ClusterIssuer, and…
v1.21.224.0 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-webhook
Admission webhook component of cert-manager. Validates and mutates cert-manager API resources and serves the conversion webhook for its CRD versions.
v1.21.219.0 MB3 versions
Security & supply chainstandardApache-2.0
A 1
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more).
v0.16.623.9 MB
CI/CD & registrystandardApache-2.0
D 1
checkov
Checkov, the static analysis scanner for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, CI configs). From PyPI into…
v3.3.25116.4 MB
Security & supply chainstandardApache-2.0
A 2
cilium
The Cilium agent (cilium-agent, cilium-dbg, cilium-health, hubble, the BPF sources, CNI loopback and upstream's init scripts) built from the…
v1.20.2219.9 MB3 versions
Coordination & meshstandardApache-2.0
A 1
cilium-operator
The Cilium Operator, generic variant (cluster-pool IPAM, CRD registration, identity and endpoint garbage collection) for a Cilium install run with…
v1.20.234.6 MB3 versions
Coordination & meshstandardApache-2.0
A+
clamav
ClamAV antivirus engine built from the release tarball. clamd scans streams over TCP 3310 for apps that check uploads, freshclam keeps the signature…
v1.5.453.8 MB2 versions
Security & supply chainstandardGPL-2.0
A+
ClickHouse
Column-oriented OLAP database for real-time analytical queries over very large datasets, with high ingest rates and fast aggregations.
v26.9.5.2257.9 MB2 versions
AnalyticalstandardApache-2.0
A+
cloudnative-pg
CloudNativePG, the Kubernetes operator for PostgreSQL high availability: streaming replicas, automated failover, and backups. Built from source…
v1.30.137.4 MB3 versions
Databases & enginesstandardApache-2.0
A 1
cluster-autoscaler
Kubernetes Cluster Autoscaler, the SIG Autoscaling controller that adds nodes when pods cannot be scheduled and removes underused ones. Every cloud…
v1.36.149.3 MB3 versions
CoordinationstandardApache-2.0
A+
CockroachDB
Distributed SQL database with PostgreSQL wire compatibility and automatic horizontal scaling and survivability. BUSL is source-available, not…
v26.2.7148.0 MB
RelationallowBUSL-1.1
B 1
code-server
VS Code in the browser (Coder's code-server), a full IDE served over HTTP. Ships Coder's official prebuilt release (bundled Node 24 + compiled VS…
v4.140.0235.9 MB2 versions
Developer tools / IDEstandardMIT