Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

A 2
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
v2.21.087.2 MB
CoordinationstandardApache-2.0
D 2
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
v26.8.2231.8 MB2 versions
IdentitystandardApache-2.0
A 1
kfp-api-server
The Kubeflow Pipelines API server, which stores pipelines, runs, experiments and recurring runs in MySQL and compiles each run to an Argo Workflow.…
v2.18.035.0 MB2 versions
Machine learning & AIstandardApache-2.0
A 1
kfp-driver
The Kubeflow Pipelines v2 driver, the step Argo runs before every task to resolve inputs, check the cache and record executions in ML Metadata. Built…
v2.18.026.8 MB2 versions
Machine learning & AIstandardApache-2.0
A+
kfp-frontend
The Kubeflow Pipelines UI, the React client and the Node server that serves it and proxies the API server, artifacts and pod logs. Built from source…
v2.18.070.5 MB2 versions
Machine learning & AIstandardApache-2.0
A 1
kfp-launcher
The Kubeflow Pipelines v2 launcher, a static binary copied into every task container that runs the user command and moves input and output artifacts…
v2.18.025.6 MB2 versions
Machine learning & AIstandardApache-2.0
A 1
kfp-persistence-agent
The Kubeflow Pipelines persistence agent, which watches Argo Workflows and ScheduledWorkflows and reports run state back to the API server. Built…
v2.18.016.6 MB2 versions
Machine learning & AIstandardApache-2.0
A 1
kfp-scheduled-workflow-controller
The Kubeflow Pipelines ScheduledWorkflow controller, which starts recurring and cron-scheduled pipeline runs. Built from source.
v2.18.019.2 MB2 versions
Machine learning & AIstandardApache-2.0
Held
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
v2.4.785.1 MB2 versions
GatewaystandardApache-2.0
Held
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
v2.4.759.2 MB2 versions
GatewaystandardApache-2.0
D 3
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
v0.19.193.2 MB2 versions
Security & supply chainstandardApache-2.0
D 2
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
v3.9.446.1 MB
GatewaystandardApache-2.0