Images

18 images

Observability images

Hardened container images in the observability category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
Alertmanager
Companion to Prometheus that routes, groups, deduplicates, and silences alerts and dispatches them to email, Slack, PagerDuty, and more.
image v0.33.1
ObservabilitystandardApache-2.0
0 CVE
cadvisor
Analyzes resource usage and performance characteristics of running containers. Image only, no chart.
image v0.60.5
ObservabilitystandardApache-2.0
0 CVE
coroot
Coroot — open-source observability/APM (eBPF-based metrics, logs, traces, cost insights and service maps) with an embedded Vue UI. Built from source on Wolfi (go:embedded frontend, cgo lz4), prometheus/ch-go bumped to their fixed lines. Image only, no chart.
image v1.23.3
ObservabilitystandardApache-2.0
0 CVE
Fluent Bit
Lightweight, fast log and metrics processor and forwarder for collecting, filtering, and shipping telemetry to many backends.
image v5.0.9
ObservabilitystandardApache-2.0
0 CVE
graylog
Graylog, the log-management and analysis server (search, dashboards, alerting, GELF/Beats inputs). Built clean-room on a hardened Wolfi JRE (nonroot, read-only rootfs); the chart provides MongoDB (metadata) and OpenSearch (log storage) backends. Graylog Server is SSPL-1.0 (source-available, not OSI-approved).
image v7.1.6
ObservabilitystandardSSPL-1.0
0 CVE
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base; in-memory storage by default, badger under a volume.
image v2.19.0
ObservabilitystandardApache-2.0
0 CVE
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
image v5.6.3
ObservabilitystandardApache-2.0
0 CVE
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts are mounted at runtime.
image v2.1.0
ObservabilitystandardAGPL-3.0
0 CVE
kube-state-metrics
Exposes the state of Kubernetes objects as Prometheus metrics for dashboards and alerts. Image only, no chart.
image v2.18.0, 2.17.0, 2.19.1
ObservabilitystandardApache-2.0
0 CVE
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
image v3.7.4
ObservabilitystandardAGPL-3.0
0 CVE
mimir
Horizontally scalable, highly available long-term storage for Prometheus metrics. Single static Go binary (all-in-one or microservices target) on a hardened nonroot Wolfi base; object storage is the operator's choice.
image v3.1.2
ObservabilitystandardAGPL-3.0
0 CVE
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
image v0.156.0
ObservabilitystandardApache-2.0