Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

D 1
label-studio
Label Studio, the open-source data labeling tool for text, images, audio, video and time series, with a web UI and a token-authenticated REST API.…
v1.23.2340.3 MB
Machine learning & AIstandardApache-2.0
A+
linkerd-cni
Linkerd's CNI plugin (the alternative to the proxy-init init container), its installer and the Rust cni-repair-controller, built from source from the…
v1.7.019.3 MB
Coordination & meshstandardApache-2.0
A 1
linkerd-control-plane
Linkerd's control plane `controller` binary (destination, identity, proxy-injector, sp-validator, service-mirror, heartbeat -- one binary, role…
v26.10.120.4 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-extension-init
Linkerd extension-init, the Job the Linkerd Viz chart runs to label its namespace (extension and pod-security labels), built from source in Rust from…
v0.1.127.9 MB
Coordination & meshstandardApache-2.0
A+
linkerd-policy-controller
Linkerd's Rust policy controller (policy-controller), serving Linkerd's authorization-policy CRDs to the proxy data plane over gRPC. Built from…
v26.10.114.7 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-proxy
linkerd2-proxy, Linkerd's Rust data-plane sidecar (mTLS termination and meshed traffic routing) -- a from-scratch Rust proxy with no bundled C++…
v2.370.016.2 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-viz-metrics-api
Linkerd Viz metrics-api, the Prometheus-backed stats API behind the Viz dashboard and linkerd viz stat, built from source from the same…
v26.10.118.8 MB4 versions
Coordination & meshstandardApache-2.0
A+
linkerd-viz-tap
Linkerd Viz tap, the tap API server and (with the injector argument) the tap-injector webhook the Viz chart runs from the same image, built from…
v26.10.119.2 MB4 versions
Coordination & meshstandardApache-2.0
A+
litellm
LiteLLM proxy, one OpenAI-compatible API to call, route, budget and log 100+ LLM providers. MIT build from PyPI in a Python 3.13 venv on a hardened…
v1.105.0182.3 MB2 versions
AI gatewaystandardMIT
A 1
litestream
Streaming replication for SQLite databases to object storage such as S3, GCS, and Azure. Image only, no chart.
v0.5.1720.8 MB
Storage & platformstandardApache-2.0
A 1
livekit
WebRTC SFU server for scalable real-time audio, video, and data. Single static Go binary on a hardened nonroot Wolfi base; config via mounted YAML or…
v1.13.919.4 MB
Media & streamingstandardApache-2.0
A 2
Loki
Horizontally scalable log aggregation system from Grafana that indexes only labels, not full log text. Like Prometheus, but for logs. Licensed AGPL.
v3.7.888.8 MB
ObservabilitystandardAGPL-3.0