Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

D 2
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
v25.0.5.0.3112.2 MB3 versions
Language runtimestandardGPL-2.0-with-classpath-exception
D 3
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
v2.580.2126.7 MB2 versions
CI/CD & registrystandardMIT
D 4
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
v2.566149.7 MB3 versions
CI/CD & registrystandardMIT
D 2
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
v12.1.14119.6 MB2 versions
GatewaystandardEPL-2.0 OR Apache-2.0
D 2
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
v5.6.3140.7 MB
ObservabilitystandardApache-2.0
D 2
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
v6.2.093.1 MB3 versions
Apps & productivitystandardGPL-2.0+
D 2
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
v25.0.5.0.383.5 MB3 versions
Runtime basestandardGPL-2.0-with-classpath-exception
D 2
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
v6.2.068.0 MB3 versions
Machine learning & AIstandardBSD-3-Clause
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
v2.3.017.1 MB
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
v4.3.2203.7 MB
MessagingcriticalApache-2.0
A 1
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
v1.10.07.2 MB3 versions
ObservabilitystandardApache-2.0
D 2
karapace
Karapace, Aiven's Kafka schema registry (Avro, JSON Schema, Protobuf) and REST proxy, both Confluent-API compatible. From the tagged source into a…
v6.2.4125.0 MB
MessagingstandardApache-2.0