Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A+
rust
Hardened Rust toolchain (cargo plus rustc) for build stages; ship the compiled binary on the static base. Latest 3 stable lines (1.94/1.95/1.96).
v1.99.0366.5 MB2 versions
Language runtimestandardMIT OR Apache-2.0
A+
RustFS
S3-compatible, high-performance object store written in Rust with a zero-master architecture, positioned as an Apache-2.0 MinIO alternative.…
v1.0.0_beta1282.6 MB3 versions
Object storagelowApache-2.0
A+
ScyllaDB
High-throughput, low-latency wide-column store, API-compatible with Apache Cassandra and DynamoDB. This 6.x build is the final OSS line under AGPL.
v2026.3.380.6 MB
Wide-columnlowAGPL-3.0
A 1
sealed-secrets
Sealed Secrets, the controller that lets you commit encrypted secrets to Git safely. A cluster-side private key decrypts SealedSecret resources into…
v0.40.015.8 MB3 versions
Security & supply chainstandardApache-2.0
A 1
SeaweedFS
Fast distributed storage for blobs, objects, and files (S3 API) built on Facebook's Haystack design, with O(1) disk seeks for billions of small…
v4.4851.6 MB
Object storagestandardApache-2.0
A 1
secrets-store-csi-driver
Secrets Store CSI Driver, mounting secrets from external stores (Vault, cloud KMS) into pods as volumes, built from source.
v1.6.120.1 MB2 versions
Security & supply chainstandardApache-2.0
A+
shellcheck
Static analysis for shell scripts. Flags quoting bugs, unsafe globbing, and portability issues in sh and bash; pipe a script in with "-" or mount a…
v0.11.04.0 MB
CI/CD & registrystandardGPL-3.0
A 1
skopeo
Skopeo, the daemonless CLI to inspect, copy, sync and delete container images between registries and storage transports. Built from source (static…
v1.24.110.2 MB
Security & supply chainstandardApache-2.0
A+
skywalking
Apache SkyWalking APM — observability platform for distributed systems (distributed tracing, metrics, logs and service topology) via the OAP backend.…
v11.0.0200.2 MB
ObservabilitystandardApache-2.0
D 1
Solr
Enterprise search platform built on Apache Lucene, offering full-text search, faceting, and indexing over large document collections.
v10.0.0347.0 MB
SearchlowApache-2.0
A+
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
v8.1.0.638984.9 MB
CI/CD & registrystandardLGPL-3.0
A 1
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
v1.56.225.3 MB
IdentitystandardApache-2.0