Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

C 8
drupal
Drupal core, the open-source CMS and content framework. Built from the official release tarball on a hardened Wolfi php-8.4-fpm + nginx runtime…
v11.4.568.1 MB7 versions
Apps & productivitystandardGPL-2.0+
A+
duckdb
In-process analytical SQL database CLI, shipped from upstream's official precompiled binary. Image only, no chart.
v1.5.526.2 MB3 versions
Databases & enginesstandardMIT
C 5
Elasticsearch
Distributed search and analytics engine. Shipped under SSPL/Elastic License, which are not OSI-approved; OpenSearch (Apache-2.0) is the open drop-in…
v9.5.2667.3 MB
SearchlowSSPL-1.0
C 5
elixir
Hardened Elixir runtime on the BEAM VM, built on Erlang/OTP, for concurrent, fault-tolerant apps (e.g. Phoenix). Latest stable (1.18).
v1.19.568.9 MB3 versions
Language runtimestandardApache-2.0
C 5
emqx
Massively scalable, distributed MQTT broker for IoT, IIoT, and connected vehicles. Speaks MQTT 5.0 over TCP/TLS/websockets with a clustering engine…
v6.2.2126.0 MB
MessagingstandardBUSL-1.1
A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
v1.38.146.3 MB3 versions
GatewaystandardApache-2.0
C 3
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
v1.9.139.4 MB2 versions
GatewaystandardApache-2.0
C 5
erlang
Hardened Erlang/OTP runtime on the BEAM VM, built for highly concurrent, fault-tolerant systems. Latest stable lines (27/28/29).
v29.0.563.3 MB3 versions
Language runtimestandardApache-2.0
C 6
etcd
Distributed, strongly consistent key-value store using Raft consensus. The backing store for Kubernetes and a building block for service coordination…
v3.7.122.1 MB
CoordinationcriticalApache-2.0
C 5
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or…
v0.18.128.5 MB
Apps & productivitystandardMIT
A 1
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
v0.22.037.0 MB
Coordination & meshstandardApache-2.0
A 1
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
v2.10.052.7 MB
Security & supply chainstandardApache-2.0