Images

48 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
dependency-track-frontend
The OWASP Dependency-Track web UI, the official release bundle served by a nonroot, read-only-rootfs nginx with a conf.d hook for proxying /api to…
image v5.1.2
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
dive
dive, the explorer for container image layers: shows each layer's files and the space wasted across them, and gates image efficiency in CI with --ci.…
image v0.13.1
الأمن وسلسلة التوريدstandardMIT
0 CVE
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
image v2.12.0, 2.11.0
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
fulcio
Fulcio, the Sigstore certificate authority: it issues short-lived code-signing certificates bound to OIDC identities, for keyless signing with…
image v1.8.8, 1.7.1
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
gitleaks
Gitleaks, the secret scanner for git history, directories and stdin. Built from source (static Go) with the git client included for history scans.…
image v8.30.1
الأمن وسلسلة التوريدstandardMIT
0 CVE
grype
Anchore's vulnerability scanner for container images and filesystems, driven by the same SBOM engine as Syft. Image only, no chart.
image v0.120.1
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
image v0.19.1, 0.18.1
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
kubescape
Kubescape CLI, the Kubernetes security scanner for posture (NSA-CISA, MITRE, CIS frameworks), misconfigurations and image vulnerabilities, against a…
image v4.0.15
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
kubescape-node-agent
Kubescape's node agent, an eBPF DaemonSet that profiles workload behaviour and detects runtime threats on each node. Built from source.
image v0.3.258
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
kubescape-operator
Kubescape's in-cluster operator, which schedules and triggers configuration and vulnerability scans for the other Kubescape components. Built from…
image v0.2.172
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
kubescape-storage
Kubescape's storage, an aggregated Kubernetes API server that holds scan results, SBOMs and application profiles. Built from source.
image v0.0.348
الأمن وسلسلة التوريدstandardApache-2.0
0 CVE
kubescape-synchronizer
Kubescape's synchronizer, which keeps Kubernetes objects and scan results in sync between the cluster and a backend. Built from source.
image v0.0.166
الأمن وسلسلة التوريدstandardApache-2.0