Images

12 images

CI/CD & registry images

Hardened container images in the ci/cd & registry category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
ansible
Ansible — agentless IT automation and configuration management (the community `ansible` package plus ansible-core and curated collections) with…
image v14.3.0, 14.3.1
CI/CD y registrostandardGPL-3.0+
0 CVE
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
image v4.0.3, 4.0.1, 4.0.2
CI/CD y registrostandardMIT
0 CVE
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more).
image v0.16.6
CI/CD y registrostandardApache-2.0
0 CVE
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
image v2.572
CI/CD y registrostandardMIT
0 CVE
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
image v2.565, 2.566, 2.564
CI/CD y registrostandardMIT
0 CVE
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
image v1.34.11, 1.36.4
CI/CD y registrostandardApache-2.0
0 CVE
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
image v1.12.6
CI/CD y registrostandardMPL-2.0
0 CVE
pulumi
Infrastructure-as-code CLI for managing cloud resources with general-purpose programming languages. Image only, no chart.
image v3.261.0, 3.260.0, 3.262.0
CI/CD y registrostandardApache-2.0
0 CVE
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
image v44.30.4
CI/CD y registrostandardAGPL-3.0
0 CVE
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
image v8.1.0.6389
CI/CD y registrostandardLGPL-3.0
0 CVE
tekton
Kubernetes-native CI/CD pipelines. Ships the Tekton Pipelines controller, webhook, resolvers, and pod-injected helper binaries, built from source on…
image v1.16.0
CI/CD y registrostandardApache-2.0
0 CVE
woodpecker
Lightweight, container-native CI/CD engine (a Drone-compatible fork) with a server, agent, and CLI. From source (Vue UI embedded in the static Go…
image v3.18.1
CI/CD y registrostandardApache-2.0