Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

A 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
v10.3.219.2 MB
RelationalstandardMIT
D 7
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
v3.4.1046.9 MB
Language runtimestandardRuby
C 7
rust
Hardened Rust toolchain (cargo plus rustc) for build stages; ship the compiled binary on the static base. Latest 3 stable lines (1.94/1.95/1.96).
v1.97.1367.0 MB
Language runtimestandardMIT OR Apache-2.0
C 4
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative.…
v1.0.0_beta1282.6 MB3 versions
Object storagelowApache-2.0
C 4
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
v2026.2.278.2 MB
Wide-columnlowAGPL-3.0
A 1
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
v0.38.414.5 MB3 versions
Security & supply chainstandardApache-2.0
D 11
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small…
v4.4651.4 MB
Object storagestandardApache-2.0
C 5
skywalking
Apache SkyWalking APM — observability platform for distributed systems (distributed tracing, metrics, logs and service topology) via the OAP backend.…
v10.4.0189.9 MB
ObservabilitystandardApache-2.0
F 8
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
v10.0.0346.2 MB
SearchlowApache-2.0
D 13
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
v8.1.0.638985.2 MB
CI/CD & registrystandardLGPL-3.0
A 1
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
v1.56.225.3 MB
IdentitystandardApache-2.0
A+
static
Tiny static base for self-contained binaries from Go or Rust. Nonroot, no shell, no package manager. The only image tagged :latest.
v20260621617.2 KB
Runtime basestandardMIT