Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

D 8
kubevuln
Kubescape's image vulnerability scanner service (kubevuln), which builds SBOMs of running images and matches them against vulnerability data. Built…
v0.3.58089.7 MB
Security & supply chainstandardApache-2.0
A 1
kubo
Kubo, the reference IPFS node, for content-addressed storage and retrieval (RPC API, HTTP gateway, libp2p swarm over TCP and QUIC). Built from source…
v0.43.127.1 MB3 versions
Object storagestandardMIT OR Apache-2.0
A 2
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
v3.0.159.1 MB2 versions
Coordination & meshstandardApache-2.0
A+
kured
kured, the Kubernetes reboot daemon: it watches each node for a reboot-required sentinel and reboots nodes one at a time behind a lock, draining them…
v1.23.027.5 MB3 versions
CoordinationstandardApache-2.0
A+
kvrocks
Apache Kvrocks, a distributed key-value database on RocksDB that speaks the Redis protocol, keeping data on disk instead of in RAM. Built from source…
v2.17.024.9 MB
CachestandardApache-2.0
A 6
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
v1.19.2256.8 MB
Security & supply chainstandardApache-2.0
D 2
label-studio
Label Studio, the open-source data labeling tool for text, images, audio, video and time series, with a web UI and a token-authenticated REST API.…
v1.23.2347.1 MB
Machine learning & AIstandardApache-2.0
A+
linkerd-cni
Linkerd's CNI plugin (the alternative to the proxy-init init container), its installer and the Rust cni-repair-controller, built from source from the…
v1.7.119.5 MB2 versions
Coordination & meshstandardApache-2.0
A 1
linkerd-control-plane
Linkerd's control plane `controller` binary (destination, identity, proxy-injector, sp-validator, service-mirror, heartbeat -- one binary, role…
v26.10.220.4 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-extension-init
Linkerd extension-init, the Job the Linkerd Viz chart runs to label its namespace (extension and pod-security labels), built from source in Rust from…
v0.1.127.8 MB
Coordination & meshstandardApache-2.0
A+
linkerd-policy-controller
Linkerd's Rust policy controller (policy-controller), serving Linkerd's authorization-policy CRDs to the proxy data plane over gRPC. Built from…
v26.10.214.6 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-proxy
linkerd2-proxy, Linkerd's Rust data-plane sidecar (mTLS termination and meshed traffic routing) -- a from-scratch Rust proxy with no bundled C++…
v2.372.016.3 MB4 versions
Coordination & meshstandardApache-2.0