Images

406 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 406 available now.

A 1
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
v1.13.135.2 MB
CI/CD & registrystandardMPL-2.0
A 1
oras
ORAS, the CLI that pushes and pulls arbitrary artifacts (SBOMs, signatures, Helm charts, any file) to and from OCI registries. Built from source…
v1.3.45.1 MB
Security & supply chainstandardApache-2.0
D 2
ory-hydra
Ory Hydra, the OAuth 2.0 and OpenID Connect provider. Built from source like upstream's Linux release (cgo, sqlite, hsm, json1); one binary serves…
v26.2.020.1 MB
IdentitystandardApache-2.0
A 4
percona-xtradb-cluster-operator
The Percona Operator for MySQL based on Percona XtraDB Cluster: synchronous multi-primary Galera clusters with HAProxy or ProxySQL, backups and…
v1.20.066.6 MB3 versions
Databases & enginesstandardApache-2.0
A+
perl
Hardened Perl interpreter for scripts, text processing, and tooling. A base image to FROM for Perl workloads. Latest stable (5).
v5.44.014.3 MB
Language runtimestandardArtistic-1.0-Perl OR GPL-1.0+
A 2
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build…
v0.54.0140.7 MB
ObservabilitystandardApache-2.0
B 1
pgadmin
pgAdmin 4, the web administration and development UI for PostgreSQL (query tool, ERD, schema diff, backup and restore). The official wheel under…
v9.18238.4 MB
RelationalstandardPostgreSQL
A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
v1.26.010.6 MB3 versions
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication…
v4.7.317.4 MB3 versions
RelationalstandardHPND
A+
php
Hardened PHP CLI with common extensions, a base image to FROM for PHP apps. Latest 3 stable lines (8.3/8.4/8.5).
v8.5.1148.6 MB3 versions
Language runtimestandardPHP-3.01
A+
phpmyadmin
phpMyAdmin, the web console for MySQL and MariaDB. Built from the official release tarball on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot,…
v5.2.365.6 MB
Apps & productivitystandardGPL-2.0
A 2
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
v0.47.047.4 MB
IdentitystandardApache-2.0