Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
v1.26.010.4 MB3 versions
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication…
v4.7.319.9 MB3 versions
RelationalstandardHPND
A+
php
Hardened PHP CLI with common extensions, a base image to FROM for PHP apps. Latest 3 stable lines (8.3/8.4/8.5).
v8.5.1151.1 MB3 versions
Language runtimestandardPHP-3.01
A+
phpmyadmin
phpMyAdmin, the web console for MySQL and MariaDB. Built from the official release tarball on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot,…
v5.2.368.2 MB
Apps & productivitystandardGPL-2.0
A 2
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
v0.47.047.3 MB
IdentitystandardApache-2.0
A+
pnpm
Node base image with pnpm preinstalled via corepack, used as the build stage for pnpm projects. Lines 10/11.
v12.9.177.9 MB2 versions
Build toolstandardMIT
B 2
pocketbase
Open-source backend in a single file with an embedded SQLite database, auth, file storage, realtime subscriptions, and an admin dashboard over a REST…
v0.40.412.6 MB
Apps & productivitystandardMIT
A 3
podman
Podman, the daemonless container engine with a Docker-compatible CLI, built from source and run rootless as uid 1001 with crun, conmon, netavark and…
v6.1.370.5 MB2 versions
Security & supply chainstandardApache-2.0
A+
poetry
Python base image with Poetry for dependency management and packaging, used as the build stage for Python projects. Line 2.
v2.5.150.7 MB
Build toolstandardMIT
A+
polaris
Fairwinds Polaris, the Kubernetes configuration validator. Audits running workloads or YAML files against best-practice checks (security contexts,…
v10.2.516.4 MB3 versions
Security & supply chainstandardApache-2.0
A 1
policy-reporter
Policy Reporter, Kyverno's PolicyReport aggregator. Watches PolicyReport results from Kyverno and other engines, serves them over a REST API and…
v3.11.036.1 MB3 versions
Security & supply chainstandardMIT
A 1
postgres-exporter
Prometheus exporter that collects PostgreSQL activity, replication, and performance stats and exposes them as metrics for monitoring.
v0.20.15.9 MB
Metrics/ExportercriticalApache-2.0