Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

B 1
Tempo
Distributed tracing backend from Grafana that ingests OpenTelemetry, Jaeger, and Zipkin spans and stores them cheaply in object storage. Licensed AGPL.
v3.0.239.5 MB
ObservabilitystandardAGPL-3.0
B 3
Temporal
Durable workflow orchestration engine that persists execution state so long-running, multi-step processes survive crashes and resume exactly where they left off.
v1.31.261.5 MB
WorkflowstandardMIT
B 1
Temporal CLI
Command-line client and built-in dev server for Temporal, used to start workflows, inspect history, and run a local cluster.
v1.8.141.3 MB3 versions
WorkflowstandardMIT
A+
tigerbeetle
Distributed financial-grade accounting database for high-throughput double-entry bookkeeping. Ships a single self-contained static Zig binary; speaks its own binary protocol (not HTTP) on port 3000.
v0.17.911.6 MB3 versions
DatabasestandardApache-2.0
A+
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for high-ingest metrics and event data. Built clean-licensed from source on Wolfi (no TSL community code).
v2.29.0148.1 MB3 versions
Time seriesstandardApache-2.0
A+
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web applications.
v11.0.2486.9 MB
GatewaycriticalApache-2.0
B 1
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
v3.7.953.9 MB
GatewaystandardMIT
D 2
trivy
Aqua Security's all-in-one vulnerability, misconfiguration, secret, and SBOM scanner for images, filesystems, and repositories. Image only, no chart.
v0.72.050.5 MB
Security & supply chainstandardApache-2.0
B 1
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime dependency the operator provides.
v5.13.191.1 MB
GatewaystandardMPL-2.0
A+
typesense
Fast, typo-tolerant search engine with an instant-search REST API and a self-contained embedded store (no external database), tuned for low-latency site and in-app search.
v30.2147.4 MB3 versions
SearchstandardGPL-3.0
A+
uv
Python base image with uv, a fast Rust-based installer and resolver, used as the build stage for Python projects. Line 0.11.
v0.11.3351.6 MB3 versions
Build toolstandardMIT OR Apache-2.0
A+
Valkey
BSD-licensed in-memory key-value store, the truly-open community fork of Redis 7.2. QuenchWorks' default cache and the recommended Redis drop-in replacement.
v9.1.114.9 MB3 versions
CachecriticalBSD-3-Clause