Images

435 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 435 available now.

D 2
dagster
Dagster, the asset-oriented data orchestrator for ML and analytics pipelines. dagster, dagster-webserver, dagster-graphql and dagster-postgres from…
v1.13.29114.0 MB
WorkflowstandardApache-2.0
A 6
dapr
Dapr, the distributed application runtime - the daprd sidecar with building-block APIs (state, pub/sub, bindings, actors, workflows) and its control…
v1.18.10147.3 MB2 versions
WorkflowstandardApache-2.0
D 3
datahub-frontend
DataHub frontend, the Play server for the DataHub React UI, login and GraphQL proxy. Upstream's release taken by digest and repackaged on a Wolfi JRE…
v1.8.0634.7 MB2 versions
AnalyticalstandardApache-2.0
D 2
datahub-gms
DataHub GMS, the metadata service of the DataHub data catalog: REST, OpenAPI and GraphQL APIs with the Kafka consumers embedded. Upstream's release…
v1.8.0646.0 MB2 versions
AnalyticalstandardApache-2.0
D 3
datahub-upgrade
DataHub upgrade job, whose SystemUpdate task creates the SQL table, Kafka topics and search indices a fresh DataHub install needs. Upstream's release…
v1.8.0675.9 MB2 versions
AnalyticalstandardApache-2.0
Held
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Frozen at 2.9.7 since…
v2.9.745.2 MB
Language runtimestandardMIT
D 2
dependency-track
OWASP Dependency-Track API server, the SBOM analysis platform that tracks components across projects and flags known vulnerabilities, outdated and…
v5.1.2177.8 MB
Security & supply chainstandardApache-2.0
A+
dependency-track-frontend
The OWASP Dependency-Track web UI, the official release bundle served by a nonroot, read-only-rootfs nginx with a conf.d hook for proxying /api to…
v5.1.211.2 MB
Security & supply chainstandardApache-2.0
A 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot…
v0.37.023.1 MB2 versions
CoordinationstandardApache-2.0
A 1
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
v2.46.119.0 MB2 versions
IdentitystandardApache-2.0
A 1
distribution
The CNCF reference OCI and Docker registry server for storing and distributing container images and other OCI artifacts.
v3.1.216.4 MB
RegistrystandardApache-2.0
D 3
dive
dive, the explorer for container image layers: shows each layer's files and the space wasted across them, and gates image efficiency in CI with --ci.…
v0.13.14.3 MB
Security & supply chainstandardMIT