Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

A 3
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and…
v1.21.211.6 MB3 versions
Security & supply chainstandardApache-2.0
D 6
cert-manager-controller
Core controller of cert-manager, the CNCF standard for X.509 certificate management on Kubernetes. Reconciles Certificate, Issuer, ClusterIssuer, and…
v1.21.224.1 MB3 versions
Security & supply chainstandardApache-2.0
A 3
cert-manager-webhook
Admission webhook component of cert-manager. Validates and mutates cert-manager API resources and serves the conversion webhook for its CRD versions.
v1.21.219.1 MB3 versions
Security & supply chainstandardApache-2.0
D 6
chartmuseum
Helm chart repository server with support for cloud object storage backends (S3, GCS, Azure, and more).
v0.16.624.0 MB
CI/CD & registrystandardApache-2.0
D 1
checkov
Checkov, the static analysis scanner for infrastructure as code (Terraform, CloudFormation, Kubernetes, Helm, Dockerfile, CI configs). From PyPI into…
v3.3.30117.4 MB
Security & supply chainstandardApache-2.0
A 18
cilium
The Cilium agent (cilium-agent, cilium-dbg, cilium-health, hubble, the BPF sources, CNI loopback and upstream's init scripts) built from the…
v1.20.3217.8 MB3 versions
Coordination & meshstandardApache-2.0
D 6
cilium-operator
The Cilium Operator, generic variant (cluster-pool IPAM, CRD registration, identity and endpoint garbage collection) for a Cilium install run with…
v1.20.334.7 MB3 versions
Coordination & meshstandardApache-2.0
A+
clamav
ClamAV antivirus engine built from the release tarball. clamd scans streams over TCP 3310 for apps that check uploads, freshclam keeps the signature…
v1.5.451.5 MB2 versions
Security & supply chainstandardGPL-2.0
A+
ClickHouse
Column-oriented OLAP database for real-time analytical queries over very large datasets, with high ingest rates and fast aggregations.
v26.9.24.8258.8 MB2 versions
AnalyticalstandardApache-2.0
A 4
cloudnative-pg
CloudNativePG, the Kubernetes operator for PostgreSQL high availability: streaming replicas, automated failover, and backups. Built from source…
v1.30.137.4 MB3 versions
Databases & enginesstandardApache-2.0
A 3
cluster-autoscaler
Kubernetes Cluster Autoscaler, the SIG Autoscaling controller that adds nodes when pods cannot be scheduled and removes underused ones. Every cloud…
v1.36.149.3 MB3 versions
CoordinationstandardApache-2.0
D 31
CockroachDB
Distributed SQL database with PostgreSQL wire compatibility and automatic horizontal scaling and survivability. BUSL is source-available, not…
v26.2.7148.0 MB
RelationallowBUSL-1.1