Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

C 12
authentik
Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on…
v2026.5.6229.8 MB
Secrets & identitystandardMIT
A 1
blackbox-exporter
Prometheus exporter that probes endpoints externally over HTTP, HTTPS, TCP, DNS, and ICMP for black-box uptime and latency monitoring.
v0.28.08.9 MB
Metrics/ExporterstandardApache-2.0
A 1
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
v4.0.314.6 MB3 versions
CI/CD & registrystandardMIT
A+
bun
Hardened Bun runtime and toolkit (runtime, bundler, package manager) for JavaScript and TypeScript. Latest stable (1).
v1.3.1438.1 MB3 versions
Language runtimestandardMIT
A+
BusyBox
Hardened minimal base/toolbox image bundling common Unix utilities in one binary. Image only, no chart.
v1.38.04.1 MB3 versions
Base imagelowGPL-2.0
C 5
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
v2.11.422.9 MB
GatewaystandardApache-2.0
A 2
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi…
v1.4.162.2 MB
WorkflowstandardMIT
A 1
cadvisor
Analyzes resource usage and performance characteristics of running containers. Image only, no chart.
v0.60.510.3 MB
ObservabilitystandardApache-2.0
F 7
Cassandra
Distributed wide-column NoSQL store built for linear horizontal scale and high availability with no single point of failure, tuned for heavy writes.
v5.0.9140.3 MB
Wide-columnstandardApache-2.0
A 1
centrifugo
Scalable real-time messaging server (WebSocket, SSE, GRPC) with channels, presence, and JWT auth. Built from source as a static Go binary on a…
v6.9.523.3 MB
MessagingstandardApache-2.0
A+
cert-manager-acmesolver
acmesolver component of cert-manager. The minimal HTTP server cert-manager runs as ephemeral pods to answer ACME http-01 challenge requests during…
v1.21.25.8 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and…
v1.21.211.6 MB3 versions
Security & supply chainstandardApache-2.0