Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

A+
jdk
Hardened OpenJDK with the javac compiler, a build-stage base image to FROM for Java apps. LTS lines 17/21/25.
v25.0.4.1112.7 MB3 versions
Language runtimestandardGPL-2.0-with-classpath-exception
C 1
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
v2.580.1127.2 MB2 versions
CI/CD & registrystandardMIT
A 1
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
v2.566168.1 MB3 versions
CI/CD & registrystandardMIT
A+
jetty
Eclipse Jetty, the lightweight Java web server and servlet container (Jakarta EE 10 on 12.0, EE 11 on 12.1), from the official jetty-home…
v12.1.14120.3 MB2 versions
GatewaystandardEPL-2.0 OR Apache-2.0
A+
jmeter
Apache JMeter load-testing and performance-measurement tool, the official binary distribution running on a hardened Wolfi JRE. Image only, no chart.
v5.6.3141.5 MB
ObservabilitystandardApache-2.0
A+
joomla
Joomla, the PHP content-management system. The official Full_Package release on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot, read-only…
v6.1.494.4 MB2 versions
Apps & productivitystandardGPL-2.0+
A+
jre
Hardened Java runtime (JRE) for running a built jar, no compiler. Pair with the jdk, maven, or gradle build image. LTS lines 17/21/25.
v25.0.4.184.0 MB3 versions
Runtime basestandardGPL-2.0-with-classpath-exception
A+
jupyterhub
JupyterHub, the multi-user server that gives each user their own Jupyter notebook server, here as the hub with KubeSpawner (notebooks as pods) and…
v6.0.167.8 MB2 versions
Machine learning & AIstandardBSD-3-Clause
A 1
k6
Developer-friendly load and performance testing tool scripted in JavaScript. Single static Go binary on a hardened nonroot Wolfi base; test scripts…
v2.3.017.2 MB
ObservabilitystandardAGPL-3.0
A+
Kafka
Distributed event-streaming platform for high-throughput, durable, replayable publish-subscribe pipelines and stream processing.
v4.3.1205.1 MB
MessagingcriticalApache-2.0
A 1
kafka-exporter
kafka_exporter, the Prometheus exporter for Kafka brokers, topics, partitions and consumer-group lag. Built from the release tag as one static…
v1.10.07.2 MB3 versions
ObservabilitystandardApache-2.0
A+
karapace
Karapace, Aiven's Kafka schema registry (Avro, JSON Schema, Protobuf) and REST proxy, both Confluent-API compatible. From the tagged source into a…
v6.2.4123.7 MB
MessagingstandardApache-2.0