Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A+
crane
crane, the go-containerregistry CLI for working with images and registries directly (copy, digest, append, export, mutate, catalog). From Wolfi's…
v0.22.15.4 MB
Security & supply chainstandardApache-2.0
A+
cratedb
CrateDB, the distributed SQL database for time series, logs and full-text search (PostgreSQL wire protocol plus an HTTP SQL endpoint, on Lucene).…
v6.4.5189.4 MB
Databases & enginesstandardApache-2.0
A 1
crossplane
Crossplane, the CNCF control-plane framework that turns Kubernetes into a universal API for infrastructure. Installs Providers, Functions and…
v2.4.221.9 MB3 versions
GitOpsstandardApache-2.0
A 1
csi-attacher
The Kubernetes CSI external-attacher sidecar, which attaches and detaches CSI volumes through VolumeAttachment objects. Built from source with the…
v4.13.019.8 MB3 versions
Storage & platformstandardApache-2.0
A+
csi-livenessprobe
The Kubernetes CSI livenessprobe sidecar, which serves /healthz by probing a CSI driver socket. Built from source with the vulnerable modules…
v2.20.07.6 MB3 versions
Storage & platformstandardApache-2.0
A+
csi-node-driver-registrar
The Kubernetes CSI node-driver-registrar sidecar, which registers a node CSI driver with the kubelet (busybox included for driver preStop hooks).…
v2.18.011.4 MB3 versions
Storage & platformstandardApache-2.0
A 1
csi-provisioner
The Kubernetes CSI external-provisioner sidecar, which creates and deletes CSI volumes for PersistentVolumeClaims. Built from source with the…
v6.3.020.1 MB3 versions
Storage & platformstandardApache-2.0
A 1
csi-resizer
The Kubernetes CSI external-resizer sidecar, which expands CSI volumes when a PersistentVolumeClaim grows. Built from source with the vulnerable…
v2.3.019.9 MB3 versions
Storage & platformstandardApache-2.0
A 1
csi-snapshotter
The Kubernetes CSI external-snapshotter sidecar, which creates and deletes CSI snapshots for VolumeSnapshotContent objects. Built from source with…
v8.6.019.1 MB3 versions
Storage & platformstandardApache-2.0
A+
dagster
Dagster, the asset-oriented data orchestrator for ML and analytics pipelines. dagster, dagster-webserver, dagster-graphql and dagster-postgres from…
v1.13.25113.4 MB
WorkflowstandardApache-2.0
A 6
dapr
Dapr, the distributed application runtime - the daprd sidecar with building-block APIs (state, pub/sub, bindings, actors, workflows) and its control…
v1.18.4147.1 MB2 versions
WorkflowstandardApache-2.0
A+
deno
Hardened Deno runtime for JavaScript and TypeScript, secure by default with explicit permissions and built-in tooling. Latest stable (2).
v2.9.745.2 MB
Language runtimestandardMIT