Images

195 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 195 available now.

B 1
code-server
VS Code in the browser (Coder's code-server), a full IDE served over HTTP. Ships Coder's official prebuilt release (bundled Node 24 + compiled VS Code) hardened on a minimal, nonroot Wolfi base; runs as a single-replica Deployment with a persistent workspace and PASSWORD login.
v4.130.0207.9 MB
Developer tools / IDEstandardMIT
A+
composer
PHP base image with the Composer dependency manager, used as the build stage for PHP projects. Line 2.
v2.10.228.8 MB3 versions
Build toolstandardMIT
B 4
Coolify
Control-plane application for Coolify, an open-source self-hostable PaaS alternative to Heroku, Vercel, and Netlify for deploying apps, databases, and services on your own servers.
v4.2.0119.0 MB
PaaSstandardApache-2.0
B 2
Coolify Realtime
Realtime server component of Coolify, providing the websocket connections and terminal/log gateway for the dashboard. Licensed AGPL.
v1.0.1699.6 MB
PaaSstandardAGPL-3.0+
B 1
coredns
Fast, flexible DNS server that chains plugins to serve DNS and service discovery, the default cluster DNS for Kubernetes.
v1.14.623.1 MB
CoordinationstandardApache-2.0
B 1
coroot
Coroot — open-source observability/APM (eBPF-based metrics, logs, traces, cost insights and service maps) with an embedded Vue UI. Built from source on Wolfi (go:embedded frontend, cgo lz4), prometheus/ch-go bumped to their fixed lines. Image only, no chart.
v1.23.326.0 MB
ObservabilitystandardApache-2.0
B 1
cosign
Sigstore's container-signing CLI. Keyless sign and verify of images, SBOMs, and attestations against the Fulcio/Rekor transparency log. Image only, no chart.
v3.1.230.2 MB
Security & supply chainstandardApache-2.0
A+
CouchDB
Document database with an HTTP/JSON API and multi-master replication, designed for offline-first sync across nodes and devices.
v3.5.2126.9 MB3 versions
DocumentstandardApache-2.0
B 1
crossplane
Crossplane, the CNCF control-plane framework that turns Kubernetes into a universal API for infrastructure. Installs Providers, Functions and Configurations as OCI packages, and lets platform teams publish their own composite APIs from CompositeResourceDefinitions and Compositions.
v2.3.421.7 MB3 versions
GitOpsstandardApache-2.0
A+
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Latest stable (2).
v2.9.447.9 MB
Language runtimestandardMIT
B 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot Wolfi base.
v0.36.021.8 MB
CoordinationstandardApache-2.0
B 1
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC tokens to apps and Kubernetes.
v2.45.117.0 MB
IdentitystandardApache-2.0