Images

407 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 407 available now.

A 1
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
v0.40.31.6 GB3 versions
Machine learning & AIstandardMIT
A 1
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
v1.21.114.5 MB
Security & supply chainstandardApache-2.0
A 1
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
v3.23.124.5 MB3 versions
Security & supply chainstandardApache-2.0
A 1
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
v2.7.141.2 MB
SecretsstandardMPL-2.0
A 1
opencost
Kubernetes cost monitoring and allocation (CNCF). Serves the cost-model API on 9003 as a single static Go binary on a hardened nonroot Wolfi base,…
v1.121.339.6 MB3 versions
ObservabilitystandardApache-2.0
A+
openfga
Fine-grained authorization engine (Zanzibar-style relationship-based access control) over HTTP and gRPC. From source on a hardened nonroot Wolfi…
v1.22.021.8 MB2 versions
IdentitystandardApache-2.0
A+
openldap
OpenLDAP slapd, the reference open-source LDAP directory server, with the LMDB (back-mdb) backend and the client tools. Runs nonroot on unprivileged…
v2.7.115.6 MB2 versions
IdentitystandardOLDAP-2.8
A+
openresty
OpenResty, nginx with LuaJIT and the lua-nginx-module set for scriptable proxies and web apps. Built from source on Wolfi against the system OpenSSL,…
v1.31.1.120.6 MB2 versions
GatewaystandardBSD-2-Clause
A+
openscap
OpenSCAP, the SCAP compliance scanner (oscap for XCCDF and OVAL evaluation, datastream validation and reports), with the scap-security-guide content,…
v1.4.4219.6 MB
Security & supply chainstandardLGPL-2.1+
A+
OpenSearch
Search and analytics suite with a Kibana-style dashboards UI. The Apache-2.0 community fork of Elasticsearch and the recommended open alternative.
v3.9.0947.7 MB2 versions
SearchstandardApache-2.0
F 5
opensearch-dashboards
The web UI for OpenSearch, for search, dashboards and visualizations. Ships without the security plugins, matching the opensearch image.
v3.8.0394.0 MB
SearchstandardApache-2.0
A 1
OpenTelemetry Collector
OpenTelemetry Collector that receives, processes, and exports traces, metrics, and logs, a vendor-neutral pipeline for telemetry routing.
v0.162.0115.8 MB
ObservabilitystandardApache-2.0