Images

405 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 405 available now.

A 2
easegress
Easegress, the Go traffic orchestration gateway (HTTP/1-3 proxy, filters and pipelines, embedded etcd for clustering), with the egctl admin client.…
v2.11.053.5 MB3 versions
GatewaystandardApache-2.0
A+
Elasticsearch
Distributed search and analytics engine. Shipped under SSPL/Elastic License, which are not OSI-approved; OpenSearch (Apache-2.0) is the open drop-in…
v9.5.5663.9 MB
SearchlowSSPL-1.0
A+
elixir
Hardened Elixir runtime on the BEAM VM, built on Erlang/OTP, for concurrent, fault-tolerant apps (e.g. Phoenix). Latest stable (1.18).
v1.19.569.7 MB3 versions
Language runtimestandardApache-2.0
C 1
emissary
Emissary-ingress, the CNCF Kubernetes API gateway built on Envoy (Mapping, Host and Listener CRDs, auth, rate limiting, canaries). Envoy 1.37 from…
v4.1.089.2 MB
GatewaystandardApache-2.0
C 1
emissary-apiext
Emissary-ingress apiext, the conversion webhook that serves the getambassador.io CRD versions (v2 and v3alpha1) and patches the CRDs with its CA.…
v4.1.016.5 MB
GatewaystandardApache-2.0
A+
emqx
Massively scalable, distributed MQTT broker for IoT, IIoT, and connected vehicles. Speaks MQTT 5.0 over TCP/TLS/websockets with a clustering engine…
v6.3.1132.2 MB
MessagingstandardBUSL-1.1
A+
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
v1.38.146.4 MB3 versions
GatewaystandardApache-2.0
A 1
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
v1.9.239.5 MB2 versions
GatewaystandardApache-2.0
A+
erlang
Hardened Erlang/OTP runtime on the BEAM VM, built for highly concurrent, fault-tolerant systems. Latest stable lines (27/28/29).
v29.1.164.1 MB3 versions
Language runtimestandardApache-2.0
A 2
etcd
Distributed, strongly consistent key-value store using Raft consensus. The backing store for Kubernetes and a building block for service coordination…
v3.7.222.1 MB
CoordinationcriticalApache-2.0
A+
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or…
v0.18.129.4 MB
Apps & productivitystandardMIT
A 1
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
v0.23.038.1 MB
Coordination & meshstandardApache-2.0