Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

A 1
cosign
Sigstore's container-signing CLI. Keyless sign and verify of images, SBOMs, and attestations against the Fulcio/Rekor transparency log. Image only,…
v3.1.329.9 MB
Security & supply chainstandardApache-2.0
A+
cosmian-kms
KMIP 2.1 key management server with PKCS#11 and Google/Microsoft CSE support -- the only KMIP speaker in this catalog. Shipped under BUSL-1.1, which…
v5.27.115.4 MB3 versions
SecretslowBUSL-1.1
C 5
CouchDB
Document database with an HTTP/JSON API and multi-master replication, designed for offline-first sync across nodes and devices.
v3.5.2127.3 MB3 versions
DocumentstandardApache-2.0
A 1
crossplane
Crossplane, the CNCF control-plane framework that turns Kubernetes into a universal API for infrastructure. Installs Providers, Functions and…
v2.3.521.8 MB3 versions
GitOpsstandardApache-2.0
C 3
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Latest stable (2).
v2.9.645.2 MB
Language runtimestandardMIT
A 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot…
v0.36.021.9 MB
CoordinationstandardApache-2.0
C 4
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
v2.45.117.2 MB
IdentitystandardApache-2.0
A 1
distribution
The CNCF reference OCI and Docker registry server for storing and distributing container images and other OCI artifacts.
v3.1.116.3 MB
RegistrystandardApache-2.0
C 7
DocumentDB
Self-contained MongoDB-compatible server bundling PostgreSQL, the DocumentDB extension, and a wire gateway. Linux Foundation project, truly open…
v0.114.0142.2 MB
DocumentstandardMIT
C 4
dotnet
Hardened .NET SDK for building and running .NET apps. Use as a build base; ships the current LTS line (10). Image only, no chart.
v10.0.111271.3 MB
Language runtimestandardMIT
C 4
dotnet-runtime
Hardened .NET runtime for console and worker apps, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
v10.0.11161.3 MB2 versions
Runtime basestandardMIT
C 1
Dragonfly
Multi-threaded, Redis- and Memcached-compatible in-memory datastore built to scale vertically on one node. BUSL is source-available, not open source;…
v1.40.123.1 MB3 versions
CachelowBUSL-1.1