Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A+
dotnet-runtime
Hardened .NET runtime for console and worker apps, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
v10.0.11261.3 MB2 versions
Runtime basestandardMIT
A+
Dragonfly
Multi-threaded, Redis- and Memcached-compatible in-memory datastore built to scale vertically on one node. BUSL is source-available, not open source;…
v2.0.023.4 MB3 versions
CachelowBUSL-1.1
A+
drupal
Drupal core, the open-source CMS and content framework. Built from the official release tarball on a hardened Wolfi php-8.4-fpm + nginx runtime…
v11.4.871.5 MB
Apps & productivitystandardGPL-2.0+
A+
duckdb
In-process analytical SQL database CLI, shipped from upstream's official precompiled binary. Image only, no chart.
v1.5.626.2 MB3 versions
Databases & enginesstandardMIT
A 2
easegress
Easegress, the Go traffic orchestration gateway (HTTP/1-3 proxy, filters and pipelines, embedded etcd for clustering), with the egctl admin client.…
v2.11.053.4 MB3 versions
GatewaystandardApache-2.0
A+
Elasticsearch
Distributed search and analytics engine. Shipped under SSPL/Elastic License, which are not OSI-approved; OpenSearch (Apache-2.0) is the open drop-in…
v9.5.5663.7 MB
SearchlowSSPL-1.0
A+
elixir
Hardened Elixir runtime on the BEAM VM, built on Erlang/OTP, for concurrent, fault-tolerant apps (e.g. Phoenix). Latest stable (1.18).
v1.19.569.0 MB3 versions
Language runtimestandardApache-2.0
C 1
emissary
Emissary-ingress, the CNCF Kubernetes API gateway built on Envoy (Mapping, Host and Listener CRDs, auth, rate limiting, canaries). Envoy 1.37 from…
v4.1.089.1 MB
GatewaystandardApache-2.0
C 1
emissary-apiext
Emissary-ingress apiext, the conversion webhook that serves the getambassador.io CRD versions (v2 and v3alpha1) and patches the CRDs with its CA.…
v4.1.016.5 MB
GatewaystandardApache-2.0
A+
emqx
Massively scalable, distributed MQTT broker for IoT, IIoT, and connected vehicles. Speaks MQTT 5.0 over TCP/TLS/websockets with a clustering engine…
v6.3.1131.9 MB
MessagingstandardBUSL-1.1
A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
v1.38.146.4 MB3 versions
GatewaystandardApache-2.0
A 1
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
v1.9.239.5 MB2 versions
GatewaystandardApache-2.0