Images

48 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
kubevuln
Kubescape's image vulnerability scanner service (kubevuln), which builds SBOMs of running images and matches them against vulnerability data. Built…
image v0.3.501
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
image v1.19.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
notation
Notation, the Notary Project CLI to sign and verify container images and OCI artifacts against trust policies. Built from source (static Go). Image…
image v1.3.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
image v1.21.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
image v3.21.1, 3.22.2, 3.23.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
openscap
OpenSCAP, the SCAP compliance scanner (oscap for XCCDF and OVAL evaluation, datastream validation and reports), with the scap-security-guide content,…
image v1.4.4
Seguridad y cadena de suministrostandardLGPL-2.1+
0 CVE
oras
ORAS, the CLI that pushes and pulls arbitrary artifacts (SBOMs, signatures, Helm charts, any file) to and from OCI registries. Built from source…
image v1.3.4
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
podman
Podman, the daemonless container engine with a Docker-compatible CLI, built from source and run rootless as uid 1001 with crun, conmon, netavark and…
image v6.0.2, 6.1.3
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
polaris
Fairwinds Polaris, the Kubernetes configuration validator. Audits running workloads or YAML files against best-practice checks (security contexts,…
image v10.0.0, 10.2.5, 10.1.8
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
policy-reporter
Policy Reporter, Kyverno's PolicyReport aggregator. Watches PolicyReport results from Kyverno and other engines, serves them over a REST API and…
image v3.9.0, 3.11.0, 3.10.0
Seguridad y cadena de suministrostandardMIT
0 CVE
rekor-tiles
Rekor v2, the Sigstore transparency log, rebuilt on Trillian Tessera tiles: it needs no Trillian or MySQL. Built from source with the POSIX storage…
image v2.3.0, 2.2.1, 2.1.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
image v0.38.4, 0.40.0, 0.39.1
Seguridad y cadena de suministrostandardApache-2.0