Images

377 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 377 available now.

B 2
vikunja
Self-hosted to-do and project management app (lists, kanban, gantt, calendar) serving both the API and the Vue web UI. From source with the UI…
v2.7.036.7 MB2 versions
Apps & productivitystandardAGPL-3.0+
A 3
vitess
Horizontal sharding, connection pooling and failover for MySQL. Ships the core command set as one image (vtgate, vttablet, vtctld, vtctldclient,…
v24.0.4171.6 MB2 versions
Databases & enginesstandardApache-2.0
A+
vllm
vLLM, the high-throughput LLM inference and serving engine with an OpenAI-compatible API. CPU build — installs vLLM's prebuilt CPU wheel (torch+cpu,…
v0.31.01.0 GB2 versions
Machine learning & AIstandardApache-2.0
A 1
weaviate
Open-source AI-native vector database for semantic search and retrieval-augmented generation, with hybrid keyword plus vector queries.
v1.40.071.1 MB2 versions
Search & vectorstandardBSD-3-Clause
A+
wildfly
WildFly, the Jakarta EE application server, on a Wolfi openjdk-21 JRE. Nonroot, read-only rootfs (all runtime writes under /tmp), HTTP on 8080 and…
v41.0.1306.8 MB
GatewaystandardApache-2.0
A+
wiremock
WireMock, the HTTP API mock server (stubs, response templating, proxying and recording, fault injection, request journal, admin API) on Jetty 12.…
v3.13.2100.1 MB
CIstandardApache-2.0
A 2
woodpecker
Lightweight, container-native CI/CD engine (a Drone-compatible fork) with a server, agent, and CLI. From source (Vue UI embedded in the static Go…
v3.18.162.3 MB
CI/CD & registrystandardApache-2.0
A+
wordpress
WordPress, the PHP content-management system and blogging platform. Reconstructed clean-room from the official release on a hardened Wolfi…
v7.1.399.8 MB3 versions
Apps & productivitystandardGPL-2.0+
A+
xyops
xyops, a workflow-automation and server-monitoring system (job scheduler, monitors, alerting, ticketing) by the creator of Cronicle. Built from…
v1.1.488.9 MB
WorkflowstandardBSD-3-Clause
A+
yarn
Node base image with Yarn preinstalled, used as the build stage for Yarn projects. Lines 1 (classic) and 4 (berry).
v4.18.156.8 MB3 versions
Build toolstandardBSD-2-Clause
A+
yourls
YOURLS, the self-hosted URL shortener with click stats, an admin UI and an API. The release tarball on Wolfi php-fpm behind QuenchWorks nginx (8080),…
v1.10.650.5 MB
Apps & productivitystandardMIT
A+
zabbix-server
Zabbix server, the collector and alerting engine of the Zabbix monitoring platform, built from source with the PostgreSQL backend. Ships the database…
v7.4.1531.8 MB3 versions
ObservabilitystandardAGPL-3.0