Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

D 14
Grafana
Dashboards and visualization for metrics, logs, and traces across many data sources. OSS edition, licensed AGPL.
v13.1.4345.5 MB6 versions
ObservabilitystandardAGPL-3.0
C 6
graylog
Graylog, the log-management and analysis server (search, dashboards, alerting, GELF/Beats inputs). Built clean-room on a hardened Wolfi JRE (nonroot,…
v7.1.8425.1 MB6 versions
ObservabilitystandardSSPL-1.0
C 2
grype
Anchore's vulnerability scanner for container images and filesystems, driven by the same SBOM engine as Syft. Image only, no chart.
v0.118.030.0 MB
Security & supply chainstandardApache-2.0
C 5
HAProxy
High-performance TCP and HTTP load balancer and reverse proxy known for reliability and fine-grained traffic control at scale.
v3.4.023.1 MB3 versions
GatewaystandardGPL-2.0+
D 9
Harbor core
Core API server and control plane of the Harbor container registry, handling auth, projects, policies, and orchestration.
v2.15.227.9 MB
RegistrystandardApache-2.0
D 7
Harbor exporter
Prometheus exporter that exposes Harbor registry health and usage metrics for monitoring.
v2.15.214.9 MB
RegistrystandardApache-2.0
D 7
Harbor jobservice
Harbor's asynchronous job runner that executes replication, garbage collection, and image-scan tasks in the background.
v2.15.219.1 MB
RegistrystandardApache-2.0
C 5
Harbor portal
Web UI for the Harbor container registry, serving the management dashboard for projects, repositories, and scan results.
v2.15.213.8 MB
RegistrystandardApache-2.0
D 6
Harbor registry
OCI registry storage backend (Docker distribution) that stores and serves image layers and manifests for Harbor.
v2.15.212.7 MB
RegistrystandardApache-2.0
D 8
Harbor registryctl
Harbor registry controller that manages garbage collection and registry storage lifecycle operations alongside the registry backend.
v2.15.213.2 MB
RegistrystandardApache-2.0
C 8
Harbor trivy-adapter
Harbor vulnerability-scan adapter backed by Trivy, scanning pushed images for CVEs and reporting results into Harbor.
v2.15.280.2 MB
RegistrystandardApache-2.0
A 1
headscale
Open-source, self-hosted implementation of the Tailscale control server for coordinating a WireGuard mesh. Single static Go binary on a hardened…
v0.29.319.9 MB
Coordination & meshstandardBSD-3-Clause