Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

D 3
gogs
Gogs, the painless self-hosted Git service (repositories, issues, pull requests, wikis, webhooks, built-in SSH). Built from source with the…
v0.14.355.8 MB
GitstandardMIT
A 1
gotify
Self-hosted server for sending and receiving real-time push messages over WebSocket, with a web UI and app tokens. From source (UI embedded,…
v3.1.113.9 MB
MessagingstandardMIT
D 2
gradle
JDK base image with Gradle, used as the build stage for Gradle projects; run the resulting jar on jre. Line 9.
v9.9.0229.0 MB2 versions
Build toolstandardApache-2.0
A 1
Grafana
Dashboards and visualization for metrics, logs, and traces across many data sources. OSS edition, licensed AGPL.
v13.1.9266.6 MB
ObservabilitystandardAGPL-3.0
C 2
grafana-alloy
OpenTelemetry Collector distribution that collects, transforms, and ships logs, metrics, traces, and profiles, configured in Grafana's Alloy syntax.…
v1.20.1114.8 MB2 versions
ObservabilitystandardApache-2.0
A+
gravitee-console
Gravitee APIM console, the Angular admin UI for designing, deploying and securing APIs. The static bundle from the APIM full distribution served by…
v4.12.2635.4 MB2 versions
GatewaystandardApache-2.0
A+
gravitee-gateway
Gravitee API Management (APIM) community gateway: v2 and v4 HTTP and TCP proxy APIs with plans, API keys, JWT and OAuth2, rate limits and 80+…
v4.12.26320.2 MB2 versions
GatewaystandardApache-2.0
A+
gravitee-management-api
Gravitee APIM management API, the REST API behind the console and the developer portal, on MongoDB or JDBC (PostgreSQL, MariaDB). From the APIM full…
v4.12.26321.1 MB2 versions
GatewaystandardApache-2.0
D 3
graylog
Graylog, the log-management and analysis server (search, dashboards, alerting, GELF/Beats inputs). Built clean-room on a hardened Wolfi JRE (nonroot,…
v7.1.12425.7 MB
ObservabilitystandardSSPL-1.0
D 3
grist
Grist, the self-hosted spreadsheet-database (Airtable alternative) with Python formulas. The tagged source compiled with yarn and pinned production…
v1.7.22221.2 MB
Apps & productivitystandardApache-2.0
A 1
grype
Anchore's vulnerability scanner for container images and filesystems, driven by the same SBOM engine as Syft. Image only, no chart.
v0.121.230.8 MB
Security & supply chainstandardApache-2.0
D 2
guacamole
Apache Guacamole, clientless remote desktop in the browser for RDP, VNC, SSH and telnet hosts, as the web app (pair it with guacd). Assembled from…
v1.6.0111.8 MB
Apps & productivitystandardApache-2.0