Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

B 1
pyroscope
Continuous profiling database for analyzing CPU, memory, and other resource usage over time. From source with the React UI embedded (no Node at runtime) on a hardened nonroot Wolfi base.
v2.1.031.1 MB
ObservabilitystandardAGPL-3.0
A+
python
Hardened CPython interpreter with pip, a 0-CVE signed nonroot base image to FROM for Python apps. Ships the latest 3 stable minors (no :latest).
v3.14.631.0 MB3 versions
Language runtimestandardPSF-2.0
A+
Qdrant
Vector database and similarity-search engine for AI embeddings, powering semantic search, recommendations, and RAG with filtered nearest-neighbor queries.
v1.18.343.5 MB
VectorstandardApache-2.0
A+
questdb
High-performance time-series SQL database for fast ingestion and queries over metrics, financial ticks, and IoT data, with PostgreSQL-wire and InfluxDB line-protocol ingestion.
v9.4.3117.7 MB3 versions
Time seriesstandardApache-2.0
A+
quickwit
Cloud-native search engine for logs, traces, and analytics with sub-second search over object storage. Built from Rust source (UI embedded, no Node at runtime) on a hardened nonroot Wolfi base; index data on object storage or a writable volume.
v0.8.295.0 MB
SearchstandardAGPL-3.0
A+
RabbitMQ
Reliable message broker speaking AMQP plus MQTT and STOMP, with flexible routing, queues, and acknowledgements for decoupling services.
v4.3.4128.9 MB3 versions
MessagingcriticalMPL-2.0
B 1
rclone
Command-line program to sync files and directories to and from dozens of cloud storage providers. Image only, no chart.
v1.74.427.7 MB
Storage & platformstandardMIT
A+
Redis
In-memory key-value store used as a cache, message broker, and ephemeral datastore. Shipped under AGPL (not permissive); Valkey is the BSD-licensed open alternative.
v8.10.015.2 MB3 versions
CachecriticalAGPL-3.0
B 1
redis-exporter
Prometheus exporter that scrapes Redis and Valkey runtime stats and exposes them as metrics for dashboards and alerts.
v1.88.04.6 MB3 versions
Metrics/ExportercriticalMIT
A+
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
v44.2.3118.7 MB
CI/CD & registrystandardAGPL-3.0
B 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened nonroot Wolfi base; data dir is a writable volume.
v10.2.518.9 MB
RelationalstandardMIT
A+
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
v3.4.1046.8 MB
Language runtimestandardRuby