Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A+
dependency-track
OWASP Dependency-Track API server, the SBOM analysis platform that tracks components across projects and flags known vulnerabilities, outdated and…
v5.1.2178.4 MB
Security & supply chainstandardApache-2.0
A+
dependency-track-frontend
The OWASP Dependency-Track web UI, the official release bundle served by a nonroot, read-only-rootfs nginx with a conf.d hook for proxying /api to…
v5.1.211.2 MB
Security & supply chainstandardApache-2.0
A 1
descheduler
Kubernetes descheduler that evicts pods so the scheduler can re-place them for better cluster balance. Single static Go binary on a hardened nonroot…
v0.37.023.1 MB2 versions
CoordinationstandardApache-2.0
A 1
dex
Federated OpenID Connect (OIDC) identity provider. Acts as a portal to other identity providers (LDAP, SAML, GitHub, Google, OIDC) and issues OIDC…
v2.45.117.2 MB
IdentitystandardApache-2.0
A 1
distribution
The CNCF reference OCI and Docker registry server for storing and distributing container images and other OCI artifacts.
v3.1.216.3 MB
RegistrystandardApache-2.0
D 3
dive
dive, the explorer for container image layers: shows each layer's files and the space wasted across them, and gates image efficiency in CI with --ci.…
v0.13.14.3 MB
Security & supply chainstandardMIT
A+
DocumentDB
Self-contained MongoDB-compatible server bundling PostgreSQL, the DocumentDB extension, and a wire gateway. Linux Foundation project, truly open…
v0.117.0147.1 MB3 versions
DocumentstandardMIT
A+
dotnet
Hardened .NET SDK for building and running .NET apps. Use as a build base; ships the current LTS line (10). Image only, no chart.
v10.0.112274.8 MB
Language runtimestandardMIT
A+
dotnet-runtime
Hardened .NET runtime for console and worker apps, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.
v10.0.11262.2 MB2 versions
Runtime basestandardMIT
A+
Dragonfly
Multi-threaded, Redis- and Memcached-compatible in-memory datastore built to scale vertically on one node. BUSL is source-available, not open source;…
v2.0.223.4 MB3 versions
CachelowBUSL-1.1
A+
drupal
Drupal core, the open-source CMS and content framework. Built from the official release tarball on a hardened Wolfi php-8.4-fpm + nginx runtime…
v11.4.869.0 MB
Apps & productivitystandardGPL-2.0+
A+
duckdb
In-process analytical SQL database CLI, shipped from upstream's official precompiled binary. Image only, no chart.
v1.5.626.2 MB3 versions
Databases & enginesstandardMIT