Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

C 12
n8n-runners
n8n external task-runner sidecar — isolates and executes workflow code (JS/Python) out of the main n8n process for security and scale. Built from…
v2.32.7184.5 MB
WorkflowstandardLicenseRef-n8n-Sustainable-Use-License-1.0
C 3
NATS
Lightweight, high-performance messaging system for cloud-native pub/sub and request-reply, with optional JetStream persistence and streaming.
v2.14.56.9 MB2 versions
MessagingstandardApache-2.0
A 1
navidrome
Self-hosted music server and streamer compatible with the Subsonic/OpenSubsonic API, with a modern web UI. From source (React UI embedded,…
v0.64.024.7 MB
Media & streamingstandardGPL-3.0
F 7
Neo4j
Graph database for highly connected data, queried with Cypher for traversals and relationship-heavy workloads. Community edition is GPLv3.
v2026.05.0243.7 MB3 versions
GraphlowGPL-3.0
C 8
nextcloud
Nextcloud, the self-hosted file-sync and content-collaboration platform. Reconstructed clean-room on a hardened Wolfi php-8.4-fpm + nginx runtime…
v34.0.3409.3 MB5 versions
Apps & productivitystandardAGPL-3.0
C 5
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
v1.30.411.6 MB3 versions
GatewaycriticalBSD-2-Clause
A+
nginx-gateway-fabric
NGINX Gateway Fabric control plane: the F5/NGINX Gateway API implementation. Watches GatewayClass, Gateway, HTTPRoute and its own gateway.nginx.org…
v2.6.717.1 MB
GatewaystandardApache-2.0
C 6
nginx-gateway-fabric-nginx
NGINX Gateway Fabric data plane: nginx built from source with the njs dynamic module, NGF's own njs scripts and base configs, and nginx-agent v3…
v2.6.734.5 MB
GatewaystandardBSD-2-Clause AND Apache-2.0
C 4
node
Hardened Node.js runtime with npm, a 0-CVE signed nonroot base image for JavaScript apps. Active LTS lines (20/22/24).
v26.7.060.7 MB3 versions
Language runtimestandardMIT
A 1
node-exporter
Prometheus exporter for host-level hardware and OS metrics (CPU, memory, disk, network) on Linux machines.
v1.12.16.5 MB
Metrics/ExporterstandardApache-2.0
A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
v1.3.011.8 MB3 versions
MessagingstandardMIT
C 6
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
v2.28.020.7 MB
MessagingstandardApache-2.0