Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A 1
csi-snapshotter
The Kubernetes CSI external-snapshotter sidecar, which creates and deletes CSI snapshots for VolumeSnapshotContent objects. Built from source with…
v8.6.019.0 MB3 versions
Storage & platformstandardApache-2.0
A+
dagster
Dagster, the asset-oriented data orchestrator for ML and analytics pipelines. dagster, dagster-webserver, dagster-graphql and dagster-postgres from…
v1.13.25115.7 MB
WorkflowstandardApache-2.0
A 6
dapr
Dapr, the distributed application runtime - the daprd sidecar with building-block APIs (state, pub/sub, bindings, actors, workflows) and its control…
v1.18.4146.9 MB2 versions
WorkflowstandardApache-2.0
A+
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Latest stable (2).
v2.9.745.2 MB
Language runtimestandardMIT
A+
dependency-track
OWASP Dependency-Track API server, the SBOM analysis platform that tracks components across projects and flags known vulnerabilities, outdated and…
v5.1.2178.2 MB
Security & supply chainstandardApache-2.0
A+
dependency-track-frontend
The OWASP Dependency-Track web UI, the official release bundle served by a nonroot, read-only-rootfs nginx with a conf.d hook for proxying /api to…
v5.1.211.0 MB
Security & supply chainstandardApache-2.0
A 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot…
v0.37.023.0 MB2 versions
CoordinationstandardApache-2.0
A 1
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
v2.45.117.2 MB
IdentitystandardApache-2.0
A 1
distribution
The CNCF reference OCI and Docker registry server for storing and distributing container images and other OCI artifacts.
v3.1.216.3 MB
RegistrystandardApache-2.0
D 3
dive
dive, the explorer for container image layers: shows each layer's files and the space wasted across them, and gates image efficiency in CI with --ci.…
v0.13.14.3 MB
Security & supply chainstandardMIT
A+
DocumentDB
Self-contained MongoDB-compatible server bundling PostgreSQL, the DocumentDB extension, and a wire gateway. Linux Foundation project, truly open…
v0.117.0143.3 MB3 versions
DocumentstandardMIT
A+
dotnet
Hardened .NET SDK for building and running .NET apps. Use as a build base; ships the current LTS line (10). Image only, no chart.
v10.0.112271.3 MB
Language runtimestandardMIT