Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

D 2
guacd
guacd, the Apache Guacamole proxy daemon behind clientless browser access to RDP, VNC, SSH and telnet hosts. Built from source against Wolfi FreeRDP…
v1.6.056.8 MB
Apps & productivitystandardApache-2.0
A+
hadolint
Dockerfile linter. Checks Dockerfiles against best-practice rules and runs ShellCheck on every RUN instruction; pipe a Dockerfile in with "-". Image…
v2.15.112.5 MB
CI/CD & registrystandardGPL-3.0
A+
HAProxy
High-performance TCP and HTTP load balancer and reverse proxy known for reliability and fine-grained traffic control at scale.
v3.4.026.8 MB3 versions
GatewaystandardGPL-2.0+
D 5
Harbor core
Core API server and control plane of the Harbor container registry, handling auth, projects, policies, and orchestration.
v2.16.028.3 MB2 versions
RegistrystandardApache-2.0
D 3
Harbor exporter
Prometheus exporter that exposes Harbor registry health and usage metrics for monitoring.
v2.16.015.2 MB2 versions
RegistrystandardApache-2.0
D 3
Harbor jobservice
Harbor's asynchronous job runner that executes replication, garbage collection, and image-scan tasks in the background.
v2.16.019.6 MB2 versions
RegistrystandardApache-2.0
A+
Harbor portal
Web UI for the Harbor container registry, serving the management dashboard for projects, repositories, and scan results.
v2.16.017.5 MB2 versions
RegistrystandardApache-2.0
D 3
Harbor registry
OCI registry storage backend (Docker distribution) that stores and serves image layers and manifests for Harbor.
v2.16.012.9 MB2 versions
RegistrystandardApache-2.0
D 4
Harbor registryctl
Harbor registry controller that manages garbage collection and registry storage lifecycle operations alongside the registry backend.
v2.16.013.5 MB2 versions
RegistrystandardApache-2.0
D 4
Harbor trivy-adapter
Harbor vulnerability-scan adapter backed by Trivy, scanning pushed images for CVEs and reporting results into Harbor.
v2.16.083.9 MB2 versions
RegistrystandardApache-2.0
A+
hasura
Hasura GraphQL Engine, an instant GraphQL API with permissions over PostgreSQL. The Apache-2.0 Community Edition server and console, taken by digest…
v2.50.746.6 MB3 versions
Databases & enginesstandardApache-2.0
D 4
headscale
Open-source, self-hosted implementation of the Tailscale control server for coordinating a WireGuard mesh. Single static Go binary on a hardened…
v0.29.720.0 MB
Coordination & meshstandardBSD-3-Clause