Images

408 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 408 available now.

A+
nessie
Project Nessie, the transactional catalog for data lakehouse tables (Git-like branches and commits over Iceberg, plus the Iceberg REST catalog). The…
v0.109.0321.2 MB2 versions
Databases & enginesstandardApache-2.0
A+
nextcloud
Nextcloud, the self-hosted file-sync and content-collaboration platform. Reconstructed clean-room on a hardened Wolfi php-8.4-fpm + nginx runtime…
v34.0.4369.7 MB
Apps & productivitystandardAGPL-3.0
A+
nginx
High-performance web server, reverse proxy, and load balancer for serving static content and fronting application backends.
v1.30.515.2 MB3 versions
GatewaycriticalBSD-2-Clause
A+
nginx-gateway-fabric
NGINX Gateway Fabric control plane: the F5/NGINX Gateway API implementation. Watches GatewayClass, Gateway, HTTPRoute and its own gateway.nginx.org…
v2.7.220.0 MB
GatewaystandardApache-2.0
A 1
nginx-gateway-fabric-nginx
NGINX Gateway Fabric data plane: nginx built from source with the njs dynamic module, NGF's own njs scripts and base configs, and nginx-agent v3…
v2.7.236.1 MB
GatewaystandardBSD-2-Clause AND Apache-2.0
A+
nifi
Apache NiFi, the visual dataflow engine for routing, transforming and moving data between systems. Assembled from Apache's binary distribution on…
v2.12.0866.1 MB
WorkflowstandardApache-2.0
D 2
node
Hardened Node.js runtime with npm, a 0-CVE signed nonroot base image for JavaScript apps. Active LTS lines (20/22/24).
v26.11.160.4 MB3 versions
Language runtimestandardMIT
A 1
node-exporter
Prometheus exporter for host-level hardware and OS metrics (CPU, memory, disk, network) on Linux machines.
v1.12.16.5 MB
Metrics/ExporterstandardApache-2.0
A 1
notation
Notation, the Notary Project CLI to sign and verify container images and OCI artifacts against trust policies. Built from source (static Go). Image…
v1.3.24.2 MB
Security & supply chainstandardApache-2.0
A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
v1.3.011.9 MB3 versions
MessagingstandardMIT
A 1
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
v2.29.021.3 MB2 versions
MessagingstandardApache-2.0
A 1
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
v7.15.510.6 MB
Secrets & identitystandardMIT