Images

8 images

Workflow images

Hardened container images in the workflow category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
airflow
Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.
image v3.3.0, 3.2.2
WorkflowstandardApache-2.0
0 CVE
argo-workflows
Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller and the argo CLI/API server with an embedded React UI, built from source on a hardened nonroot Wolfi base.
image v3.7.15
WorkflowstandardApache-2.0
0 CVE
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi base; Cassandra or a SQL store is the operator's concern.
image v1.4.1
WorkflowstandardMIT
0 CVE
n8n
Fair-code workflow automation platform — build integrations and automations across 400+ apps via a visual node editor, with native AI/LLM agent nodes. Node build on a hardened nonroot Wolfi base; the flagged transitive npm CVE class is cleared image-side with pinned overrides.
image v2.32.6
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
n8n-runners
n8n external task-runner sidecar — isolates and executes workflow code (JS/Python) out of the main n8n process for security and scale. Built from source on Wolfi. Image only, no chart.
image v2.32.6
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
0 CVE
Temporal
Durable workflow orchestration engine that persists execution state so long-running, multi-step processes survive crashes and resume exactly where they left off.
image v1.31.2
WorkflowstandardMIT
0 CVE
Temporal CLI
Command-line client and built-in dev server for Temporal, used to start workflows, inspect history, and run a local cluster.
image v1.7.3, 1.8.1, 1.6.2
WorkflowstandardMIT
0 CVE
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from source on Wolfi nodejs-22 (native better-sqlite3), nonroot on a hardened read-only-rootfs base. Single-instance with an embedded SQLite store on a persistent volume; the chart runs it as a StatefulSet.
image v1.0.86
WorkflowstandardBSD-3-Clause