Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 15
argo-events
Argo Events, event-driven automation for Kubernetes (EventSources for webhooks, queues, schedules and cloud events; Sensors that trigger workflows,…
v1.9.1166.0 MB
WorkflowstandardApache-2.0
A 3
argo-rollouts
The Argo Rollouts controller, progressive delivery for Kubernetes (canary and blue-green Rollouts, analysis runs, traffic shaping through ingresses…
v1.10.127.0 MB2 versions
CIstandardApache-2.0
D 18
argo-workflows
Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller, the argo CLI/API server with an embedded…
v4.1.6103.6 MB3 versions
WorkflowstandardApache-2.0
D 12
argocd
Argo CD, the CNCF declarative GitOps continuous-delivery controller for Kubernetes. One multi-call binary serves every component (server,…
v3.5.6113.1 MB3 versions
GitOpsstandardApache-2.0
F 3
aspnet
Hardened ASP.NET Core runtime for web apps and APIs, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
v10.0.11373.6 MB2 versions
Runtime basestandardMIT
D 9
Atlantis
Terraform pull-request automation that runs plan on PRs and apply from PR comments, enforcing reviewed, Git-driven infrastructure changes with state…
v0.48.277.8 MB
GitOpsstandardApache-2.0
A 3
authelia
Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion…
v4.39.2823.1 MB
IdentitystandardApache-2.0
D 12
authentik
Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on…
v2026.8.5267.4 MB
Secrets & identitystandardMIT
A+
backdrop
Backdrop CMS, the PHP content-management system forked from Drupal 7. The official release zip on a hardened Wolfi php-8.4-fpm + nginx runtime…
v1.35.275.5 MB2 versions
Apps & productivitystandardGPL-2.0+
A 2
backing-image-manager
Longhorn's backing image server, built from the longhorn/backing-image-manager source with qemu-img, losetup and the filesystem tools it calls.…
v1.13.044.0 MB3 versions
Storage & platformstandardApache-2.0
D 6
bifrost
AI gateway giving one OpenAI-compatible API over many model providers, with load balancing and failover. Single Go binary with the web console…
v2.2.654.2 MB3 versions
AI gatewaystandardApache-2.0
A+
bind
ISC BIND 9, the authoritative and recursive DNS server (9.20 stable line). Wolfi's source-built named, nonroot on port 5353, with a default…
v9.20.3016.5 MB
CoordinationstandardMPL-2.0