Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

A 1
FerretDB
MongoDB-compatible document database that translates the MongoDB wire protocol onto PostgreSQL via the DocumentDB extension. The clean-license…
v2.7.010.4 MB
DocumentstandardApache-2.0
B 2
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi…
v2.63.2315.6 MB2 versions
Apps & productivitystandardApache-2.0
C 5
floci
Local AWS cloud emulator and LocalStack Community successor, built from source into a Quarkus fast-jar on a hardened Wolfi JRE. The hardened image…
v1.6.0191.7 MB8 versions
Apps & productivitystandardMIT
C 5
floci-full
Opt-in, NON-hardened companion to the floci image: it runs as root and expects the host Docker socket mounted, which lets it emulate all 65 of…
v1.5.29191.1 MB3 versions
Apps & productivitystandardMIT
C 5
Fluent Bit
Lightweight, fast log and metrics processor and forwarder for collecting, filtering, and shipping telemetry to many backends.
v5.1.135.9 MB6 versions
ObservabilitystandardApache-2.0
C 7
forgejo
Self-hosted lightweight Git forge (a community Gitea fork) with issues, PRs, CI, and packages. From source with the web UI embedded (no Node at…
v15.0.368.8 MB
GitstandardGPL-3.0+
C 4
Garage
Lightweight, S3-compatible object store for small, self-hosted, geo-distributed deployments that stays available across node failures. Licensed AGPL;…
v2.3.029.8 MB3 versions
Object storagestandardAGPL-3.0
D 30
ghost
Open-source Node.js publishing platform for blogs, newsletters, and membership sites. Packaged from Ghost's official npm distribution on a hardened…
v6.57.1175.2 MB6 versions
Apps & productivitystandardMIT
C 7
Gitea
Lightweight self-hosted Git service with repositories, issues, pull requests, and built-in CI/CD (Actions). A low-footprint GitHub alternative.
v1.27.370.4 MB
GitstandardMIT
A+
go
Hardened Go toolchain for compiling binaries in a build stage; pair the output with the static base for the runtime. Latest 3 stable lines…
v1.26.754.6 MB
Language runtimestandardBSD-3-Clause
A 1
gotify
Self-hosted server for sending and receiving real-time push messages over WebSocket, with a web UI and app tokens. From source (UI embedded,…
v3.1.013.9 MB
MessagingstandardMIT
C 5
gradle
JDK base image with Gradle, used as the build stage for Gradle projects; run the resulting jar on jre. Line 9.
v9.7.1249.6 MB
Build toolstandardApache-2.0