Images

381 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 381 available now.

A+
skywalking
Apache SkyWalking APM — observability platform for distributed systems (distributed tracing, metrics, logs and service topology) via the OAP backend.…
v11.0.0203.9 MB
ObservabilitystandardApache-2.0
D 1
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
v10.0.0348.2 MB
SearchlowApache-2.0
A+
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
v8.1.0.638985.9 MB
CI/CD & registrystandardLGPL-3.0
A 1
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
v1.56.225.3 MB
IdentitystandardApache-2.0
A 2
spire
SPIRE, the SPIFFE runtime that attests nodes and workloads and issues them short-lived X.509 and JWT identities (spire-server and spire-agent in one…
v1.15.367.7 MB
IdentitystandardApache-2.0
A+
squid
Caching forward proxy for HTTP and HTTPS (CONNECT). Pods reach the outside through it, and it caches repeat fetches in memory. The default config…
v7.619.5 MB
CachestandardGPL-2.0+
A+
static
Tiny static base for self-contained binaries from Go or Rust. Nonroot, no shell, no package manager. The only image tagged :latest.
v20260621593.6 KB
Runtime basestandardMIT
A 2
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
v0.30.229.8 MB
Security & supply chainstandardApache-2.0
A 1
step-issuer
step-issuer, smallstep's cert-manager external issuer. StepIssuer and StepClusterIssuer resources sign cert-manager CertificateRequests through a…
v0.12.018.4 MB3 versions
Security & supply chainstandardApache-2.0
A+
storm
Apache Storm, a distributed real-time stream processing system; one image runs Nimbus, the supervisor, the UI and the log viewer.
v3.1.0302.2 MB
MessagingstandardApache-2.0
A 1
support-bundle-kit
Rancher's support-bundle-kit, which Longhorn and Harvester run to collect cluster objects, logs and node files into a support bundle. Built from…
v0.0.9853.9 MB3 versions
Storage & platformstandardApache-2.0
A 1
syft
Anchore's CLI for generating Software Bills of Materials (SBOMs) from container images and filesystems. Image only, no chart.
v1.54.128.9 MB
Security & supply chainstandardApache-2.0