Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A+
calico-node-driver-registrar
The CSI node-driver-registrar under the name Calico's operator deploys (calico/node-driver-registrar), built from kubernetes-csi source.
v3.32.011.4 MB
NetworkingstandardApache-2.0
A+
calico-pod2daemon-flexvol
Calico's pod2daemon flexvol driver and its host installer, built from source.
v3.32.06.8 MB
NetworkingstandardApache-2.0
A 1
calico-typha
Calico Typha, the datastore fan-out cache between the Kubernetes API server and every Felix agent, built from source.
v3.32.020.2 MB
NetworkingstandardApache-2.0
A+
Cassandra
Distributed wide-column NoSQL store built for linear horizontal scale and high availability with no single point of failure, tuned for heavy writes.
v5.0.9141.0 MB
Wide-columnstandardApache-2.0
A 1
centrifugo
Scalable real-time messaging server (WebSocket, SSE, GRPC) with channels, presence, and JWT auth. Built from source as a static Go binary on a…
v6.9.723.5 MB
MessagingstandardApache-2.0
A+
ceph
Ceph, the distributed object, block and file store (mon, mgr, osd, mds, radosgw, rbd-mirror, exporter), from Wolfi's ceph-20 (Tentacle) packages…
v20.2.4387.1 MB
Storage & platformstandardLGPL-2.1
A+
ceph-csi-operator
The Ceph CSI operator, which deploys and configures the Ceph CSI driver and its sidecars from Driver and OperatorConfig resources; Rook 1.21 installs…
v1.1.017.5 MB
Storage & platformstandardApache-2.0
A 1
cephcsi
The Ceph CSI driver for RBD block, CephFS and NFS volumes, built from source against Wolfi's Ceph 20 libraries with the client tools it runs. Image…
v3.18.1252.3 MB
Storage & platformstandardApache-2.0
A+
cert-manager-acmesolver
acmesolver component of cert-manager. The minimal HTTP server cert-manager runs as ephemeral pods to answer ACME http-01 challenge requests during…
v1.21.25.8 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-cainjector
cainjector component of cert-manager. Injects CA bundles into ValidatingWebhookConfigurations, MutatingWebhookConfigurations, APIServices, and…
v1.21.211.6 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-controller
Core controller of cert-manager, the CNCF standard for X.509 certificate management on Kubernetes. Reconciles Certificate, Issuer, ClusterIssuer, and…
v1.21.224.2 MB3 versions
Security & supply chainstandardApache-2.0
A 1
cert-manager-webhook
Admission webhook component of cert-manager. Validates and mutates cert-manager API resources and serves the conversion webhook for its CRD versions.
v1.21.219.0 MB3 versions
Security & supply chainstandardApache-2.0