Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

A+
kuberay
KubeRay, the operator that runs Ray clusters, jobs and services on Kubernetes (RayCluster, RayJob, RayService). Built from source, static Go…
v1.7.112.3 MB3 versions
Machine learning & AIstandardApache-2.0
D 12
kubescape
Kubescape CLI, the Kubernetes security scanner for posture (NSA-CISA, MITRE, CIS frameworks), misconfigurations and image vulnerabilities, against a…
v4.0.15189.9 MB
Security & supply chainstandardApache-2.0
D 19
kubescape-node-agent
Kubescape's node agent, an eBPF DaemonSet that profiles workload behaviour and detects runtime threats on each node. Built from source.
v0.3.25887.2 MB
Security & supply chainstandardApache-2.0
D 7
kubescape-operator
Kubescape's in-cluster operator, which schedules and triggers configuration and vulnerability scans for the other Kubescape components. Built from…
v0.2.17234.1 MB
Security & supply chainstandardApache-2.0
D 10
kubescape-storage
Kubescape's storage, an aggregated Kubernetes API server that holds scan results, SBOMs and application profiles. Built from source.
v0.0.34961.6 MB
Security & supply chainstandardApache-2.0
D 8
kubescape-synchronizer
Kubescape's synchronizer, which keeps Kubernetes objects and scan results in sync between the cluster and a backend. Built from source.
v0.0.16742.9 MB
Security & supply chainstandardApache-2.0
D 10
kubevuln
Kubescape's image vulnerability scanner service (kubevuln), which builds SBOMs of running images and matches them against vulnerability data. Built…
v0.3.54679.0 MB
Security & supply chainstandardApache-2.0
A 1
kubo
Kubo, the reference IPFS node, for content-addressed storage and retrieval (RPC API, HTTP gateway, libp2p swarm over TCP and QUIC). Built from source…
v0.43.127.1 MB3 versions
Object storagestandardMIT OR Apache-2.0
A 2
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
v2.14.561.6 MB
Coordination & meshstandardApache-2.0
A+
kured
kured, the Kubernetes reboot daemon: it watches each node for a reboot-required sentinel and reboots nodes one at a time behind a lock, draining them…
v1.23.028.4 MB3 versions
CoordinationstandardApache-2.0
A+
kvrocks
Apache Kvrocks, a distributed key-value database on RocksDB that speaks the Redis protocol, keeping data on disk instead of in RAM. Built from source…
v2.17.024.9 MB
CachestandardApache-2.0
A 6
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
v1.19.1256.3 MB
Security & supply chainstandardApache-2.0