Images

8 images

Workflow images

Hardened container images in the workflow category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.
image v3.3.0, 3.2.2
Flujo de trabajostandardApache-2.0
0 CVE
argo-workflows
Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller and the argo CLI/API server with an embedded React UI, built from source on a hardened nonroot Wolfi base.
image v3.7.15
Flujo de trabajostandardApache-2.0
0 CVE
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi base; Cassandra or a SQL store is the operator's concern.
image v1.4.1
Flujo de trabajostandardMIT
0 CVE
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.
image v2.32.6
Flujo de trabajostandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
n8n-runners
n8n external task-runner sidecar — isolates and executes workflow code (JS/Python) out of the main n8n process for security and scale. Built from source on Wolfi. Image only, no chart.
image v2.32.6
Flujo de trabajostandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
Temporal
Motor de orquestación de flujos de trabajo duradero que persiste el estado de ejecución para que los procesos de larga duración y de varios pasos sobrevivan a las caídas y se reanuden exactamente donde se quedaron.
image v1.31.2
Flujo de trabajostandardMIT
0 CVE
Temporal CLI
Cliente de línea de comandos y servidor de desarrollo integrado para Temporal, usado para iniciar flujos de trabajo, inspeccionar el historial y ejecutar un clúster local.
image v1.7.3, 1.8.1, 1.6.2
Flujo de trabajostandardMIT
0 CVE
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from source on Wolfi nodejs-22 (native better-sqlite3), nonroot on a hardened read-only-rootfs base. Single-instance with an embedded SQLite store on a persistent volume; the chart runs it as a StatefulSet.
image v1.0.86
Flujo de trabajostandardBSD-3-Clause