Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

A+
BusyBox
Hardened minimal base/toolbox image bundling common Unix utilities in one binary. Image only, no chart.
v1.38.04.1 MB3 versions
Base imagelowGPL-2.0
B 1
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
v2.11.422.8 MB
GatewaystandardApache-2.0
B 2
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi base; Cassandra or a SQL store is the operator's concern.
v1.4.158.0 MB
WorkflowstandardMIT
B 1
cadvisor
Analyzes resource usage and performance characteristics of running containers. Image only, no chart.
v0.60.510.2 MB
ObservabilitystandardApache-2.0
A+
Cassandra
Distributed wide-column NoSQL store built for linear horizontal scale and high availability with no single point of failure, tuned for heavy writes.
v5.0.8140.2 MB
Wide-columnstandardApache-2.0
B 1
centrifugo
Scalable real-time messaging server (WebSocket, SSE, GRPC) with channels, presence, and JWT auth. Built from source as a static Go binary on a hardened nonroot Wolfi base.
v6.9.123.0 MB
MessagingstandardApache-2.0
A+
cert-manager-acmesolver
acmesolver component of cert-manager. The minimal HTTP server cert-manager runs as ephemeral pods to answer ACME http-01 challenge requests during certificate issuance.
v1.21.15.8 MB3 versions
Security & supply chainstandardApache-2.0
B 1
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and conversion CRDs so the rest of the stack trusts cert-manager-issued certificates.
v1.21.111.6 MB3 versions
Security & supply chainstandardApache-2.0
B 1
cert-manager-controller
Core controller of cert-manager, the CNCF standard for X.509 certificate management on Kubernetes. Reconciles Certificate, Issuer, ClusterIssuer, and ACME order resources, automating issuance and renewal from Let's Encrypt, Vault, Venafi, and self-signed/CA issuers.
v1.21.124.0 MB3 versions
Security & supply chainstandardApache-2.0
B 1
cert-manager-webhook
Admission webhook component of cert-manager. Validates and mutates cert-manager API resources and serves the conversion webhook for its CRD versions.
v1.21.119.0 MB3 versions
Security & supply chainstandardApache-2.0
D 2
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more). Image only, no chart.
v0.16.520.3 MB
CI/CD & registrystandardApache-2.0
A+
ClickHouse
Column-oriented OLAP database for real-time analytical queries over very large datasets, with high ingest rates and fast aggregations.
v26.7.1.1315229.7 MB3 versions
AnalyticalstandardApache-2.0