Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A 1
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
v2.12.052.8 MB2 versions
Security & supply chainstandardApache-2.0
A 1
FerretDB
MongoDB-compatible document database that translates the MongoDB wire protocol onto PostgreSQL via the DocumentDB extension. The clean-license…
v2.7.010.5 MB
DocumentstandardApache-2.0
B 2
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi…
v2.63.2315.6 MB2 versions
Apps & productivitystandardApache-2.0
A+
flink
Apache Flink, the stateful stream and batch processing engine. Upstream's official binary distribution on a hardened nonroot Wolfi JRE 21, with the…
v2.3.0356.8 MB
WorkflowstandardApache-2.0
A+
floci
Local AWS cloud emulator and LocalStack Community successor, built from source into a Quarkus fast-jar on a hardened Wolfi JRE. The hardened image…
v2.2.0168.6 MB3 versions
Apps & productivitystandardMIT
A+
floci-full
Opt-in, NON-hardened companion to the floci image: it runs as root and expects the host Docker socket mounted, which lets it emulate all 65 of…
v2.2.0168.6 MB
Apps & productivitystandardMIT
A+
Fluent Bit
Lightweight, fast log and metrics processor and forwarder for collecting, filtering, and shipping telemetry to many backends.
v5.1.337.0 MB
ObservabilitystandardApache-2.0
A+
fluentd
Fluentd, the CNCF unified logging layer that collects, parses, buffers and routes logs (forward, HTTP and tail inputs; stdout and file outputs built…
v1.19.432.1 MB
ObservabilitystandardApache-2.0
A 1
flux-helm-controller
Flux helm-controller, the GitOps controller that reconciles HelmReleases (install, upgrade, test and roll back Helm charts). Built from source with…
v1.6.524.5 MB
CI/CD & registrystandardApache-2.0
A 1
flux-image-automation-controller
Flux image-automation-controller, the GitOps controller that updates YAML in a Git repository when new container images match an ImagePolicy, and…
v1.2.520.6 MB
CI/CD & registrystandardApache-2.0
A 1
flux-image-reflector-controller
Flux image-reflector-controller, the GitOps controller that scans container image repositories and reflects their tags as ImageRepository and…
v1.2.520.0 MB
CI/CD & registrystandardApache-2.0
A 1
flux-kustomize-controller
Flux kustomize-controller, the GitOps controller that builds Kustomizations from source artifacts and applies them, with SOPS decryption and health…
v1.9.656.3 MB
CI/CD & registrystandardApache-2.0