Images

380 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 380 available now.

A+
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for…
v2.30.2147.3 MB
Time seriesstandardApache-2.0
A 1
timestamp-authority
The Sigstore Timestamp Authority, an RFC 3161 timestamping server that countersigns artifact hashes, with file, KMS and Tink signers. Built from…
v2.1.311.9 MB3 versions
Security & supply chainstandardApache-2.0
A+
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
v11.0.2688.7 MB
GatewaycriticalApache-2.0
0 CVE
tomee
Apache TomEE, Tomcat with the Jakarta EE Web Profile stack (OpenEJB, OpenWebBeans, MyFaces, CXF) for running Jakarta EE applications.
v10.2.0135.5 MB
GatewaystandardApache-2.0
A 1
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
v3.7.1454.9 MB
GatewaystandardMIT
A+
trino
Trino, the distributed SQL query engine for federated analytics. Assembled from upstream's release assets on Wolfi openjdk-25 with the jmx, memory,…
v483741.8 MB
Databases & enginesstandardApache-2.0
A 1
trivy
Aqua Security's all-in-one vulnerability, misconfiguration, secret, and SBOM scanner for images, filesystems, and repositories. Image only, no chart.
v0.75.051.7 MB
Security & supply chainstandardApache-2.0
A 1
trivy-operator
Trivy Operator, the Kubernetes operator that continuously scans workloads, configurations, RBAC and the cluster with Trivy and stores the results as…
v0.35.048.4 MB2 versions
Security & supply chainstandardApache-2.0
A 1
trivy-scanner
The QuenchWorks trivy build with a busybox userland, for the scan Jobs Trivy Operator launches (they run a shell command line around trivy). Image…
v0.75.055.7 MB
Security & supply chainstandardApache-2.0
A 1
trust-manager
trust-manager, cert-manager's trust bundle distributor. A Bundle resource gathers CA certificates from ConfigMaps, Secrets and inline PEM and writes…
v0.25.011.9 MB3 versions
Security & supply chainstandardApache-2.0
C 2
tyk
Full-featured API gateway with rate limiting, auth, and quotas. Single static Go binary on a hardened nonroot Wolfi base; Redis is a runtime…
v5.15.192.5 MB2 versions
GatewaystandardMPL-2.0
A+
typesense
Fast, typo-tolerant search engine with an instant-search REST API and a self-contained embedded store (no external database), tuned for low-latency…
v30.2147.5 MB3 versions
SearchstandardGPL-3.0