Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

A 2
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
v0.30.229.8 MB
Security & supply chainstandardApache-2.0
A 1
syft
Anchore's CLI for generating Software Bills of Materials (SBOMs) from container images and filesystems. Image only, no chart.
v1.51.128.9 MB
Security & supply chainstandardApache-2.0
A 3
tekton
Kubernetes-native CI/CD pipelines. Ships the Tekton Pipelines controller, webhook, resolvers, and pod-injected helper binaries, built from source on…
v1.16.0118.0 MB
CI/CD & registrystandardApache-2.0
C 5
Tempo
Distributed tracing backend from Grafana that ingests OpenTelemetry, Jaeger, and Zipkin spans and stores them cheaply in object storage. Licensed…
v3.0.339.7 MB
ObservabilitystandardAGPL-3.0
A 3
Temporal
Durable workflow orchestration engine that persists execution state so long-running, multi-step processes survive crashes and resume exactly where…
v1.32.066.9 MB
WorkflowstandardMIT
A 1
Temporal CLI
Command-line client and built-in dev server for Temporal, used to start workflows, inspect history, and run a local cluster.
v1.8.345.6 MB3 versions
WorkflowstandardMIT
C 7
thanos
Highly-available Prometheus setup with unlimited metric retention via object storage, adding a global query view, downsampling, and compaction across…
v0.42.435.7 MB
ObservabilitystandardApache-2.0
C 4
tigerbeetle
Distributed financial-grade accounting database for high-throughput double-entry bookkeeping. Ships a single self-contained static Zig binary; speaks…
v0.17.911.6 MB3 versions
DatabasestandardApache-2.0
C 5
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for…
v2.29.2148.6 MB9 versions
Time seriesstandardApache-2.0
C 5
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
v11.0.2587.0 MB
GatewaycriticalApache-2.0
A 1
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
v3.7.1354.7 MB
GatewaystandardMIT
C 2
trivy
Aqua Security's all-in-one vulnerability, misconfiguration, secret, and SBOM scanner for images, filesystems, and repositories. Image only, no chart.
v0.74.050.5 MB
Security & supply chainstandardApache-2.0