Images

48 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
secrets-store-csi-driver
Secrets Store CSI Driver, mounting secrets from external stores (Vault, cloud KMS) into pods as volumes, built from source.
image v1.6.1, 1.5.7
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
skopeo
Skopeo, the daemonless CLI to inspect, copy, sync and delete container images between registries and storage transports. Built from source (static…
image v1.24.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
image v0.30.2
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
step-issuer
step-issuer, smallstep's cert-manager external issuer. StepIssuer and StepClusterIssuer resources sign cert-manager CertificateRequests through a…
image v0.12.0, 0.10.2, 0.11.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
syft
Anchore's CLI for generating Software Bills of Materials (SBOMs) from container images and filesystems. Image only, no chart.
image v1.54.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
tetragon
Tetragon eBPF runtime-security agent and the tetra CLI, built from source. Watches process execution, file access and network activity in the kernel,…
image v1.7.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
tetragon-operator
Tetragon's operator, which installs and maintains the TracingPolicy and PodInfo CRDs. Image only, no chart of its own; the tetragon chart deploys it.
image v1.7.1
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
timestamp-authority
The Sigstore Timestamp Authority, an RFC 3161 timestamping server that countersigns artifact hashes, with file, KMS and Tink signers. Built from…
image v2.1.4, 1.2.9, 2.0.6
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
trivy
Aqua Security's all-in-one vulnerability, misconfiguration, secret, and SBOM scanner for images, filesystems, and repositories. Image only, no chart.
image v0.75.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
trivy-operator
Trivy Operator, the Kubernetes operator that continuously scans workloads, configurations, RBAC and the cluster with Trivy and stores the results as…
image v0.35.0, 0.34.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
trivy-scanner
The QuenchWorks trivy build with a busybox userland, for the scan Jobs Trivy Operator launches (they run a shell command line around trivy). Image…
image v0.75.0
Seguridad y cadena de suministrostandardApache-2.0
0 CVE
trust-manager
trust-manager, cert-manager's trust bundle distributor. A Bundle resource gathers CA certificates from ConfigMaps, Secrets and inline PEM and writes…
image v0.23.0, 0.25.0, 0.24.0
Seguridad y cadena de suministrostandardApache-2.0