Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A 1
concourse-git-resource
Concourse's git resource type, the upstream check/in/out scripts on Wolfi git, git-crypt, gnupg and openssh, with git-lfs and proxytunnel built from…
v1.23.041.8 MB
CI/CD & registrystandardApache-2.0
A+
configurable-http-proxy
configurable-http-proxy, the Node.js proxy JupyterHub routes users through, managed over a token-protected REST API. Packaged from npm (production…
v5.3.055.1 MB
Machine learning & AIstandardBSD-3-Clause
D 4
connaisseur
Connaisseur, the Kubernetes admission controller that verifies container image signatures (Cosign/Sigstore, Notary v1 and v2) against trust roots…
v3.13.026.9 MB3 versions
Security & supply chainstandardApache-2.0
A+
contour
Project Contour, the CNCF Kubernetes ingress controller that programs Envoy over xDS. Serves HTTPProxy and Ingress plus Gateway API, and one binary…
v1.33.718.6 MB
GatewaystandardApache-2.0
A 1
Coolify
Control-plane application for Coolify, an open-source self-hostable PaaS alternative to Heroku, Vercel, and Netlify for deploying apps, databases,…
v4.3.23120.7 MB
PaaSstandardApache-2.0
A 6
Coolify Helper
Coolify helper image carrying the build and deploy toolchain (buildpacks, git, ssh) that runs on target hosts to execute deployments.
v1.0.17161.6 MB
PaaSstandardApache-2.0 AND AGPL-3.0+
D 3
Coolify Realtime
Realtime server component of Coolify, providing the websocket connections and terminal/log gateway for the dashboard. Licensed AGPL.
v1.0.18103.6 MB
PaaSstandardAGPL-3.0+
A 1
coredns
Fast, flexible DNS server that chains plugins to serve DNS and service discovery, the default cluster DNS for Kubernetes.
v1.14.723.5 MB
CoordinationstandardApache-2.0
A 1
coroot
Coroot — open-source observability/APM (eBPF-based metrics, logs, traces, cost insights and service maps) with an embedded Vue UI. Built from source…
v1.27.126.7 MB2 versions
ObservabilitystandardApache-2.0
A 1
cosign
Sigstore's container-signing CLI. Keyless sign and verify of images, SBOMs, and attestations against the Fulcio/Rekor transparency log. Image only,…
v3.1.329.9 MB
Security & supply chainstandardApache-2.0
A+
cosmian-kms
KMIP 2.1 key management server with PKCS#11 and Google/Microsoft CSE support -- the only KMIP speaker in this catalog. Shipped under BUSL-1.1, which…
v5.28.016.3 MB3 versions
SecretslowBUSL-1.1
A+
CouchDB
Document database with an HTTP/JSON API and multi-master replication, designed for offline-first sync across nodes and devices.
v3.5.2128.2 MB3 versions
DocumentstandardApache-2.0