Images

13 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
cert-manager-acmesolver
acmesolver component of cert-manager. The minimal HTTP server cert-manager runs as ephemeral pods to answer ACME http-01 challenge requests during…
image v1.21.1, 1.21.2, 1.20.3
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and…
image v1.21.1, 1.20.3, 1.21.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
cert-manager-controller
Core controller of cert-manager, the CNCF standard for X.509 certificate management on Kubernetes. Reconciles Certificate, Issuer, ClusterIssuer, and…
image v1.21.1, 1.21.2, 1.20.3
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
cert-manager-webhook
Admission webhook component of cert-manager. Validates and mutates cert-manager API resources and serves the conversion webhook for its CRD versions.
image v1.21.2, 1.20.3, 1.21.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
cosign
Sigstore's container-signing CLI. Keyless sign and verify of images, SBOMs, and attestations against the Fulcio/Rekor transparency log. Image only,…
image v3.1.3
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
image v2.10.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
grype
Anchore's vulnerability scanner for container images and filesystems, driven by the same SBOM engine as Syft. Image only, no chart.
image v0.118.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
image v1.19.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
image v1.20.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
image v0.37.0, 0.36.6, 0.38.4
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
image v0.30.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
syft
Anchore's CLI for generating Software Bills of Materials (SBOMs) from container images and filesystems. Image only, no chart.
image v1.51.1
Seguridad y cadena de suministrostandardApache-2.0