Images

48 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
dependency-track-frontend
The OWASP Dependency-Track web UI, the official release bundle served by a nonroot, read-only-rootfs nginx with a conf.d hook for proxying /api to…
image v5.1.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
dive
dive, the explorer for container image layers: shows each layer's files and the space wasted across them, and gates image efficiency in CI with --ci.…
image v0.13.1
Seguridad y cadena de suministrostandardMIT
0 CVE
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
image v2.12.0, 2.11.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
fulcio
Fulcio, the Sigstore certificate authority: it issues short-lived code-signing certificates bound to OIDC identities, for keyless signing with…
image v1.8.8, 1.7.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
gitleaks
Gitleaks, the secret scanner for git history, directories and stdin. Built from source (static Go) with the git client included for history scans.…
image v8.30.1
Seguridad y cadena de suministrostandardMIT
0 CVE
grype
Anchore's vulnerability scanner for container images and filesystems, driven by the same SBOM engine as Syft. Image only, no chart.
image v0.120.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
image v0.19.1, 0.18.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kubescape
Kubescape CLI, the Kubernetes security scanner for posture (NSA-CISA, MITRE, CIS frameworks), misconfigurations and image vulnerabilities, against a…
image v4.0.15
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kubescape-node-agent
Kubescape's node agent, an eBPF DaemonSet that profiles workload behaviour and detects runtime threats on each node. Built from source.
image v0.3.258
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kubescape-operator
Kubescape's in-cluster operator, which schedules and triggers configuration and vulnerability scans for the other Kubescape components. Built from…
image v0.2.172
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kubescape-storage
Kubescape's storage, an aggregated Kubernetes API server that holds scan results, SBOMs and application profiles. Built from source.
image v0.0.348
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kubescape-synchronizer
Kubescape's synchronizer, which keeps Kubernetes objects and scan results in sync between the cluster and a backend. Built from source.
image v0.0.166
Seguridad y cadena de suministrostandardApache-2.0