Images

27 images

CI/CD & registry images

Hardened container images in the ci/cd & registry category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
flux-source-watcher
Flux source-watcher, the GitOps controller that composes and decorates source artifacts with ArtifactGenerator objects, producing new artifacts from…
image v2.2.4
CI/CD & registrystandardApache-2.0
0 CVE
gitlab-runner
GitLab Runner, the agent that runs GitLab CI jobs, here for the Kubernetes executor. Built from source (static Go, golang.org/x and otel floated)…
image v19.4.1, 19.2.4, 19.3.2
CI/CD & registrystandardMIT
0 CVE
hadolint
Dockerfile linter. Checks Dockerfiles against best-practice rules and runs ShellCheck on every RUN instruction; pipe a Dockerfile in with "-". Image…
image v2.15.1
CI/CD & registrystandardGPL-3.0
0 CVE
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
image v2.572, 2.580.1
CI/CD & registrystandardMIT
0 CVE
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
image v2.565, 2.566, 2.564
CI/CD & registrystandardMIT
0 CVE
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
image v1.34.12, 1.37.1
CI/CD & registrystandardApache-2.0
0 CVE
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
image v1.13.1
CI/CD & registrystandardMPL-2.0
0 CVE
pulumi
Infrastructure-as-code CLI for managing cloud resources with general-purpose programming languages. Image only, no chart.
image v3.267.0, 3.265.0, 3.266.0
CI/CD & registrystandardApache-2.0
0 CVE
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
image v44.133.0
CI/CD & registrystandardAGPL-3.0
0 CVE
shellcheck
Static analysis for shell scripts. Flags quoting bugs, unsafe globbing, and portability issues in sh and bash; pipe a script in with "-" or mount a…
image v0.11.0
CI/CD & registrystandardGPL-3.0
0 CVE
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
image v8.1.0.6389
CI/CD & registrystandardLGPL-3.0
0 CVE
tekton
Kubernetes-native CI/CD pipelines. Ships the Tekton Pipelines controller, webhook, resolvers, and pod-injected helper binaries, built from source on…
image v1.17.0
CI/CD & registrystandardApache-2.0