Images

380 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 380 available now.

A+
unbound
Unbound, the validating, recursive, caching DNS resolver from NLnet Labs. Built from source with libevent, expat and dnscrypt; a nonroot config on…
v1.26.119.0 MB
CoordinationstandardBSD-3-Clause
A+
unleash
Unleash, the feature-flag and gradual-rollout server (flags, strategies, segments, environments, admin UI, client and frontend APIs) on PostgreSQL.…
v8.2.081.5 MB3 versions
Apps & productivitystandardAGPL-3.0+
D 2
uptime-kuma
Uptime Kuma, the self-hosted uptime monitor and status-page server (HTTP, TCP, ping, DNS, database and more). The tagged server with pinned npm…
v2.5.5107.6 MB
ObservabilitystandardMIT
A+
uv
Python base image with uv, a fast Rust-based installer and resolver, used as the build stage for Python projects. Line 0.11.
v0.12.2347.2 MB3 versions
Build toolstandardMIT OR Apache-2.0
A+
Valkey
BSD-licensed in-memory key-value store, the truly-open community fork of Redis 7.2. QuenchWorks' default cache and the recommended Redis drop-in…
v9.1.218.4 MB3 versions
CachecriticalBSD-3-Clause
A+
varnish
HTTP reverse-proxy cache (web accelerator) that fronts an origin and serves its responses from memory, cutting backend load and tail latency. Caching…
v9.1.0203.3 MB3 versions
CachestandardBSD-2-Clause
C 2
vault
Secrets and encryption management for tokens, keys, and certificates, with dynamic secrets, leasing, and PKI. Shipped under the Business Source…
v2.1.195.7 MB2 versions
SecretslowBUSL-1.1
D 8
vcluster
vCluster, virtual Kubernetes clusters that run inside a namespace of a host cluster. The syncer is built from source (CGO off, floated modules); the…
v0.37.3112.9 MB3 versions
CI/CD & registrystandardApache-2.0
A+
Vector
High-performance observability pipeline that collects, transforms, and routes logs, metrics, and traces between sources and sinks.
v0.59.033.9 MB2 versions
ObservabilitystandardMPL-2.0
A 1
velero
CNCF backup and disaster-recovery tool for Kubernetes cluster resources and persistent volumes. Single static Go binary on a hardened nonroot Wolfi…
v1.18.431.2 MB
Storage & platformstandardApache-2.0
A+
velero-plugin-for-aws
Velero's object-store and volume-snapshot plugin for AWS S3 and S3-compatible stores (SeaweedFS, Garage, RustFS, MinIO). Built from source; runs as…
v1.14.423.0 MB
Storage & platformstandardApache-2.0
A 1
versitygw
Versity S3 Gateway, an S3-compatible API server that fronts a POSIX filesystem, another S3 service or Azure Blob, with IAM accounts and a built-in…
v1.8.014.5 MB3 versions
Object storagestandardApache-2.0