Images

224 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 224 available now.

C 5
httpd
Apache HTTP Server, the long-standing open-source web server and reverse proxy for serving static content and fronting application backends…
v2.4.6834.6 MB
GatewaycriticalApache-2.0
D 2
hydra
Ory Hydra, an OAuth 2.0 and OpenID Connect provider. Issues and validates tokens for first- and third-party clients without owning user credentials…
v26.2.015.0 MB2 versions
IdentitystandardApache-2.0
C 6
InfluxDB
Time-series database purpose-built for ingesting and querying metrics, events, and IoT/sensor data at high write rates.
v2.9.155.8 MB
Time seriesstandardMIT
C 6
ingress-nginx
The Kubernetes NGINX Ingress Controller. Routes external HTTP/HTTPS traffic to in-cluster Services via Ingress resources, with TLS termination,…
v1.15.1079.8 MB
GatewaystandardApache-2.0
D 4
istiod
Istio's control plane binary (pilot-discovery) -- Pilot/xDS discovery, the sidecar-injecting webhook, and the mesh CA -- built from source on Wolfi.…
v1.30.432.6 MB3 versions
Coordination & meshstandardApache-2.0
A 1
jaeger
Distributed tracing platform (Jaeger v2, OpenTelemetry-collector based) with an embedded query UI. From source on a hardened nonroot Wolfi base;…
v2.20.024.9 MB
ObservabilitystandardApache-2.0
C 4
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
v25.0.4112.1 MB3 versions
Language runtimestandardGPL-2.0-with-classpath-exception
C 6
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
v2.572171.5 MB
CI/CD & registrystandardMIT
D 39
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
v2.566171.2 MB3 versions
CI/CD & registrystandardMIT
C 5
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
v5.6.3140.6 MB
ObservabilitystandardApache-2.0
C 4
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
v25.0.483.3 MB3 versions
Runtime basestandardGPL-2.0-with-classpath-exception
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
v2.2.016.9 MB
ObservabilitystandardAGPL-3.0