Images

12 images

CI/CD & registry images

Hardened container images in the ci/cd & registry category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
ansible
Ansible — agentless IT automation and configuration management (the community `ansible` package plus ansible-core and curated collections) with ssh/git/rsync/sshpass tooling, ready to run playbooks. Built from source into a venv on a hardened nonroot Wolfi base. Image only, no chart.
image v14.1.0, 14.2.0
CI/CD y registrostandardGPL-3.0+
0 CVE
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
image v3.133.1, 3.134.0, 3.135.0
CI/CD y registrostandardMIT
0 CVE
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more). Image only, no chart.
image v0.16.5
CI/CD y registrostandardApache-2.0
0 CVE
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the architecture-independent jenkins.war LTS line on a hardened Wolfi JRE.
image v2.572
CI/CD y registrostandardMIT
0 CVE
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins controller to run builds. Image only, no chart.
CI/CD y registrostandardMIT
0 CVE
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl for CI jobs and in-cluster tooling. Image only, no chart.
image v1.34.10, 1.36.3
CI/CD y registrostandardApache-2.0
0 CVE
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
image v1.12.5
CI/CD y registrostandardMPL-2.0
0 CVE
pulumi
Infrastructure-as-code CLI for managing cloud resources with general-purpose programming languages. Image only, no chart.
image v3.253.0, 3.254.0, 3.255.0
CI/CD y registrostandardApache-2.0
0 CVE
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
image v44.2.3
CI/CD y registrostandardAGPL-3.0
0 CVE
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no chart.
image v8.1.0.6389
CI/CD y registrostandardLGPL-3.0
0 CVE
tekton
Kubernetes-native CI/CD pipelines. Ships the Tekton Pipelines controller, webhook, resolvers, and pod-injected helper binaries, built from source on a hardened nonroot Wolfi base.
image v1.14.0
CI/CD y registrostandardApache-2.0
0 CVE
woodpecker
Lightweight, container-native CI/CD engine (a Drone-compatible fork) with a server, agent, and CLI. From source (Vue UI embedded in the static Go server) on a hardened nonroot Wolfi base.
image v3.16.0
CI/CD y registrostandardApache-2.0