Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A 3
buildkit
BuildKit, the concurrent container image build engine behind docker build, as the rootless variant: buildkitd runs under rootlesskit as uid 1001 on…
v0.33.176.7 MB3 versions
Security & supply chainstandardApache-2.0
A 1
buildkite-agent
The Buildkite CI build-runner agent that executes pipeline jobs on your own infrastructure. Image only, no chart.
v4.2.116.0 MB3 versions
CI/CD & registrystandardMIT
A+
bun
Hardened Bun runtime and toolkit (runtime, bundler, package manager) for JavaScript and TypeScript. Latest stable (1).
v1.4.238.7 MB3 versions
Language runtimestandardMIT
A+
BusyBox
Hardened minimal base/toolbox image bundling common Unix utilities in one binary. Image only, no chart.
v1.38.04.2 MB3 versions
Base imagelowGPL-2.0
A 1
Caddy
Web server and reverse proxy with fully automatic HTTPS via Let's Encrypt and a simple Caddyfile config.
v2.11.723.9 MB
GatewaystandardApache-2.0
A 2
cadence
Fault-tolerant, stateful workflow orchestration engine by Uber. Ships the cadence server and CLI as static Go binaries on a hardened nonroot Wolfi…
v1.4.265.3 MB
WorkflowstandardMIT
A 1
cadvisor
Analyzes resource usage and performance characteristics of running containers. Image only, no chart.
v0.60.610.4 MB
ObservabilitystandardApache-2.0
A 2
calico-cni
Calico's CNI plugin, IPAM plugin and install-cni installer with the reference CNI plugins it ships (bandwidth, host-local, loopback, portmap, tuning,…
v3.32.060.3 MB
NetworkingstandardApache-2.0
A+
calico-csi
Calico's CSI node driver (pod2daemon csidriver), built from source.
v3.32.04.6 MB
NetworkingstandardApache-2.0
A+
calico-key-cert-provisioner
Calico's key-cert-provisioner, the init container the Tigera operator adds to request certificates through a CSR; built from source.
v3.32.012.8 MB
NetworkingstandardApache-2.0
A 1
calico-kube-controllers
Calico's Kubernetes controllers (policy, node, IPAM and service-account sync) with its check-status probe, built from source.
v3.32.023.0 MB
NetworkingstandardApache-2.0
A 1
calico-node
Project Calico's node agent (Felix, BIRD, confd) for Calico networking and network policy; Go binaries built from source over Wolfi's Calico node…
v3.32.0127.0 MB
NetworkingstandardApache-2.0