Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A+
RabbitMQ
Reliable message broker speaking AMQP plus MQTT and STOMP, with flexible routing, queues, and acknowledgements for decoupling services.
v4.3.6130.0 MB
MessagingcriticalMPL-2.0
A 1
rclone
Command-line program to sync files and directories to and from dozens of cloud storage providers. Image only, no chart.
v1.75.129.4 MB
Storage & platformstandardMIT
A+
Redis
In-memory key-value store used as a cache, message broker, and ephemeral datastore. Shipped under AGPL (not permissive); Valkey is the BSD-licensed…
v8.10.218.9 MB
CachecriticalAGPL-3.0
A 1
redis-exporter
Prometheus exporter that scrapes Redis and Valkey runtime stats and exposes them as metrics for dashboards and alerts.
v1.93.04.4 MB3 versions
Metrics/ExportercriticalMIT
A+
redmine
Redmine, the Ruby on Rails project management and issue tracker (issues, wikis, time tracking, Gantt, repositories, REST API) backed by PostgreSQL.…
v7.0.268.6 MB
Apps & productivitystandardGPL-2.0
A 1
rekor-tiles
Rekor v2, the Sigstore transparency log, rebuilt on Trillian Tessera tiles: it needs no Trillian or MySQL. Built from source with the POSIX storage…
v2.3.08.6 MB3 versions
Security & supply chainstandardApache-2.0
A+
reloader
Stakater Reloader, the Kubernetes controller that rolls Deployments, StatefulSets and DaemonSets when a ConfigMap or Secret they use changes. Built…
v1.4.2215.1 MB
CoordinationstandardApache-2.0
D 2
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
v44.148.1123.4 MB
CI/CD & registrystandardAGPL-3.0
A+
rethinkdb
RethinkDB, the realtime document database with changefeeds that push query results to clients as data changes, plus a web admin UI. From Wolfi's…
v2.4.428.4 MB
Databases & enginesstandardApache-2.0
A 1
rook
The Rook Ceph operator, which runs Ceph clusters on Kubernetes (block, object and file storage through CRDs). Built from source with its vulnerable…
v1.21.0422.9 MB
Storage & platformstandardApache-2.0
A 1
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
v10.5.319.2 MB3 versions
RelationalstandardMIT
A+
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
v4.0.726.4 MB2 versions
Language runtimestandardRuby