Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

A 2
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
v2.21.087.2 MB
CoordinationstandardApache-2.0
A+
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
v26.8.0231.4 MB2 versions
IdentitystandardApache-2.0
A 1
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
v2.4.685.2 MB2 versions
GatewaystandardApache-2.0
A+
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
v2.4.659.1 MB2 versions
GatewaystandardApache-2.0
A 1
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
v0.19.193.2 MB2 versions
Security & supply chainstandardApache-2.0
A+
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
v3.9.446.0 MB
GatewaystandardApache-2.0
A 1
krakend
Stateless, declarative API gateway that aggregates and transforms backend responses from a single JSON config. Built from the community…
v3.0.024.0 MB2 versions
GatewaystandardApache-2.0
D 2
kratos
Ory Kratos, an identity and user-management server covering registration, login, MFA, account recovery and profile self-service. Headless by design…
v26.2.018.7 MB2 versions
IdentitystandardApache-2.0
A 1
kserve-controller
The KServe controller manager, which turns InferenceService resources into model-serving Deployments with autoscaling and canary rollouts. Built from…
v0.21.022.3 MB
Machine learning & AIstandardApache-2.0
A 1
kube-state-metrics
Exposes the state of Kubernetes objects as Prometheus metrics for dashboards and alerts.
v2.20.018.6 MB3 versions
ObservabilitystandardApache-2.0
A 1
kube-vip
kube-vip, virtual IPs and load balancing for the Kubernetes control plane and for Services of type LoadBalancer, by ARP or BGP. Built from the…
v1.2.418.7 MB3 versions
Coordination & meshstandardApache-2.0
A 2
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
v1.37.153.5 MB2 versions
CI/CD & registrystandardApache-2.0