Images

380 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 380 available now.

A 1
coroot
Coroot — open-source observability/APM (eBPF-based metrics, logs, traces, cost insights and service maps) with an embedded Vue UI. Built from source…
v1.27.126.7 MB2 versions
ObservabilitystandardApache-2.0
A 1
cosign
Sigstore's container-signing CLI. Keyless sign and verify of images, SBOMs, and attestations against the Fulcio/Rekor transparency log. Image only,…
v3.1.329.9 MB
Security & supply chainstandardApache-2.0
A+
cosmian-kms
KMIP 2.1 key management server with PKCS#11 and Google/Microsoft CSE support -- the only KMIP speaker in this catalog. Shipped under BUSL-1.1, which…
v5.28.018.9 MB3 versions
SecretslowBUSL-1.1
A+
CouchDB
Document database with an HTTP/JSON API and multi-master replication, designed for offline-first sync across nodes and devices.
v3.5.2130.3 MB3 versions
DocumentstandardApache-2.0
A+
crane
crane, the go-containerregistry CLI for working with images and registries directly (copy, digest, append, export, mutate, catalog). From Wolfi's…
v0.22.15.4 MB
Security & supply chainstandardApache-2.0
A+
cratedb
CrateDB, the distributed SQL database for time series, logs and full-text search (PostgreSQL wire protocol plus an HTTP SQL endpoint, on Lucene).…
v6.4.5189.4 MB
Databases & enginesstandardApache-2.0
A 1
crossplane
Crossplane, the CNCF control-plane framework that turns Kubernetes into a universal API for infrastructure. Installs Providers, Functions and…
v2.4.222.0 MB3 versions
GitOpsstandardApache-2.0
A 1
csi-attacher
The Kubernetes CSI external-attacher sidecar, which attaches and detaches CSI volumes through VolumeAttachment objects. Built from source with the…
v4.13.019.8 MB3 versions
Storage & platformstandardApache-2.0
A+
csi-livenessprobe
The Kubernetes CSI livenessprobe sidecar, which serves /healthz by probing a CSI driver socket. Built from source with the vulnerable modules…
v2.20.07.6 MB3 versions
Storage & platformstandardApache-2.0
A+
csi-node-driver-registrar
The Kubernetes CSI node-driver-registrar sidecar, which registers a node CSI driver with the kubelet (busybox included for driver preStop hooks).…
v2.18.011.3 MB3 versions
Storage & platformstandardApache-2.0
A 1
csi-provisioner
The Kubernetes CSI external-provisioner sidecar, which creates and deletes CSI volumes for PersistentVolumeClaims. Built from source with the…
v6.3.020.0 MB3 versions
Storage & platformstandardApache-2.0
A 1
csi-resizer
The Kubernetes CSI external-resizer sidecar, which expands CSI volumes when a PersistentVolumeClaim grows. Built from source with the vulnerable…
v2.3.019.9 MB3 versions
Storage & platformstandardApache-2.0