{
  "apiVersion": "v1",
  "resource": "images",
  "page": 1,
  "perPage": 24,
  "total": 433,
  "totalPages": 19,
  "links": {
    "self": "/api/v1/images/1.json",
    "first": "/api/v1/images/1.json",
    "last": "/api/v1/images/19.json",
    "prev": null,
    "next": "/api/v1/images/2.json",
    "collection": "/api/v1/images.json"
  },
  "data": [
    {
      "slug": "actions-runner",
      "name": "actions-runner",
      "category": "CI/CD & registry",
      "summary": "GitHub's self-hosted Actions runner on Wolfi, laid out like GitHub's own image (/home/runner, uid 1001) so it drops into ARC scale sets. JavaScript actions run on Wolfi's Node 24 (node20 actions included); the bundled npm and the end-of-life Node 20 are removed. Standalone, it registers from RUNNER_URL and RUNNER_TOKEN. Image only, no chart.",
      "tier": "standard",
      "status": "available",
      "license": "MIT",
      "licenseClean": "clean",
      "version": "2.338.0",
      "versions": [
        {
          "version": "2.338.0",
          "size": "125.1 MB",
          "published": "2026-10-07T07:53:31Z",
          "digest": "sha256:2a5ae2830fe80c10a5bc31453c63e7568c847bb9b6c887af259b8308a9b5e6e1"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://github.com/actions/runner",
      "source": "https://github.com/actions/runner/releases",
      "image": "ghcr.io/quenchworks/images/actions-runner"
    },
    {
      "slug": "activemq",
      "name": "activemq",
      "category": "Messaging",
      "summary": "Apache ActiveMQ Classic, the Java message broker (JMS, OpenWire, plus AMQP, STOMP and MQTT connectors) with KahaDB persistence and a web console. Official distribution on a hardened JRE.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "6.3.2",
      "versions": [
        {
          "version": "6.3.2",
          "size": "130.8 MB",
          "published": "2026-10-22T07:16:24Z",
          "digest": "sha256:e8fa4db1c0bde33b785a0a3c55dc4a71065816cdb6510a1a24e49d4427dae6da"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://activemq.apache.org",
      "source": "https://downloads.apache.org/activemq/",
      "image": "ghcr.io/quenchworks/images/activemq"
    },
    {
      "slug": "activemq-artemis",
      "name": "activemq-artemis",
      "category": "Messaging",
      "summary": "Apache Artemis (formerly ActiveMQ Artemis), the multi-protocol Java message broker (CORE, AMQP, STOMP, MQTT, OpenWire) with a journal store and login required by default. Official distribution on a hardened JRE.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "2.57.0",
      "versions": [
        {
          "version": "2.57.0",
          "size": "123.5 MB",
          "published": "2026-10-22T07:18:47Z",
          "digest": "sha256:d71a073273eb765bf4e6ad912e09f03b493f372480d90332d8e2fe0ccf60c2fc"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://artemis.apache.org",
      "source": "https://dlcdn.apache.org/artemis/artemis/",
      "image": "ghcr.io/quenchworks/images/activemq-artemis"
    },
    {
      "slug": "adc",
      "name": "adc",
      "category": "Gateway",
      "summary": "ADC (API Declarative CLI), the declarative configuration engine for Apache APISIX and API7 Enterprise. Ships as the required adc-server sidecar of the APISIX Ingress Controller, which drives it over a shared Unix socket, and is also usable standalone to lint, diff, dump and sync APISIX configuration. Built from source as an esbuild bundle on a hardened Wolfi Node 24 rather than the upstream Node SEA release binary, which embeds an unpatched interpreter. Image only, no chart.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "0.27.1",
      "versions": [
        {
          "version": "0.27.1",
          "size": "54.3 MB",
          "published": "2026-10-22T07:59:24Z",
          "digest": "sha256:fcaabad5a08c54823a2df3f094305d4218c8109dd0ddc90061e9bf1e8948fc12"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://docs.api7.ai/enterprise/reference/adc",
      "source": "https://github.com/api7/adc",
      "image": "ghcr.io/quenchworks/images/adc"
    },
    {
      "slug": "adminer",
      "name": "adminer",
      "category": "Apps & productivity",
      "summary": "vrana's single-file PHP database manager, a web UI for MySQL/MariaDB, PostgreSQL, and SQLite, served by a hardened PHP runtime.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "6.1.2, 6.0.2, 6.1.1",
      "versions": [
        {
          "version": "6.1.2",
          "size": "16.7 MB",
          "published": "2026-10-22T07:19:38Z",
          "digest": "sha256:21a71facd08cadf3fe8178f18d7963f081e2a3c628e3c5a5a8dcbc14c7a8f815"
        },
        {
          "version": "6.0.2",
          "size": "16.7 MB",
          "published": "2026-10-22T07:19:15Z",
          "digest": "sha256:dd9dd8ba87eb180af62b17a78259a0374a97e0c9bb15e8e8966578774a7704c1"
        },
        {
          "version": "6.1.1",
          "size": "16.7 MB",
          "published": "2026-10-22T07:18:30Z",
          "digest": "sha256:5f4bc8fd9dd2fd58db531e0924bc888cdd454c0f0f1e6b97cf9bcce9079efae7"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://www.adminer.org",
      "source": "https://github.com/vrana/adminer",
      "image": "ghcr.io/quenchworks/images/adminer"
    },
    {
      "slug": "airflow",
      "name": "airflow",
      "category": "Workflow",
      "summary": "Apache Airflow, the programmatic workflow orchestration platform for authoring, scheduling, and monitoring DAGs. Built clean-room from source as a Python venv on Wolfi (python-3.12, official constraints), nonroot on a hardened read-only-rootfs base. Ships the 3.2 line (older lines carry unfixed CVEs in Airflow itself). Runs api-server + scheduler + dag-processor + triggerer (and Celery workers) from one image; needs PostgreSQL (and Redis for CeleryExecutor), provided by the chart.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "3.3.2",
      "versions": [
        {
          "version": "3.3.2",
          "size": "139.0 MB",
          "published": "2026-10-22T09:21:30Z",
          "digest": "sha256:a5b99d7c37bea127050646e12ef788beab60e98801b71cc302844262f16c426c"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://airflow.apache.org",
      "source": "https://github.com/apache/airflow",
      "image": "ghcr.io/quenchworks/images/airflow"
    },
    {
      "slug": "akhq",
      "name": "akhq",
      "category": "Messaging",
      "summary": "AKHQ, the web UI for Apache Kafka (topics, messages, consumer groups, schema registry, Kafka Connect, ACLs). The release distribution with 74 library jars swapped to fixed releases, on a Wolfi JRE 25.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "0.28.0",
      "versions": [
        {
          "version": "0.28.0",
          "size": "361.0 MB",
          "published": "2026-10-22T07:17:03Z",
          "digest": "sha256:d0ebffc73580590ce315585541fe17d6a7080af2da86cb5e0b538c78fdad7f7d"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://akhq.io",
      "source": "https://github.com/tchiotludo/akhq",
      "image": "ghcr.io/quenchworks/images/akhq"
    },
    {
      "slug": "alertmanager",
      "name": "Alertmanager",
      "category": "Observability",
      "summary": "Companion to Prometheus that routes, groups, deduplicates, and silences alerts and dispatches them to email, Slack, PagerDuty, and more.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "0.34.1",
      "versions": [
        {
          "version": "0.34.1",
          "size": "24.8 MB",
          "published": "2026-10-22T07:19:24Z",
          "digest": "sha256:f655e6ec17c3a8b6d86c7784e527a9938ea9e64262cbcd88824492d13e17cfb0"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://github.com/prometheus/alertmanager",
      "source": "https://github.com/prometheus/alertmanager",
      "image": "ghcr.io/quenchworks/images/alertmanager"
    },
    {
      "slug": "ansible",
      "name": "ansible",
      "category": "CI/CD & registry",
      "summary": "Ansible — agentless IT automation and configuration management (the community `ansible` package plus ansible-core and curated collections) with ssh/git/rsync/sshpass tooling, ready to run playbooks. Built from source into a venv on a hardened nonroot Wolfi base. Image only, no chart.",
      "tier": "standard",
      "status": "available",
      "license": "GPL-3.0+",
      "licenseClean": "agpl",
      "version": "14.4.0, 14.5.0",
      "versions": [
        {
          "version": "14.4.0",
          "size": "122.9 MB",
          "published": "2026-10-22T07:23:05Z",
          "digest": "sha256:201d075329ef9fef1158bfe6ab416e2acd39e472c622b9faf1db1e83dcd65cfa"
        },
        {
          "version": "14.5.0",
          "size": "123.5 MB",
          "published": "2026-10-22T07:21:54Z",
          "digest": "sha256:bcccaec28fb966bed3eeb9512c19654dd01e0764cd72aa0c31248a02107a70c4"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://www.ansible.com",
      "source": "https://github.com/ansible/ansible",
      "image": "ghcr.io/quenchworks/images/ansible"
    },
    {
      "slug": "apache-polaris",
      "name": "apache-polaris",
      "category": "Databases & engines",
      "summary": "Apache Polaris, the open REST catalog for Apache Iceberg (Iceberg REST and management APIs, catalog RBAC, credential vending, in-memory or PostgreSQL metastore). The official binary distribution with its admin tool on a Wolfi JRE 21, vulnerable jars swapped or stripped and the Quarkus index rebuilt.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "1.8.0",
      "versions": [
        {
          "version": "1.8.0",
          "size": "486.4 MB",
          "published": "2026-10-22T07:20:06Z",
          "digest": "sha256:29d5fe2ada88eff4d5ca96b111d1a049e770b60bca9cc6ac783004ec52386d55"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://polaris.apache.org",
      "source": "https://github.com/apache/polaris",
      "image": "ghcr.io/quenchworks/images/apache-polaris"
    },
    {
      "slug": "apisix",
      "name": "apisix",
      "category": "Gateway",
      "summary": "Cloud-native API gateway on OpenResty/LuaJIT with dynamic routing, auth, rate limiting, observability and a 100+ plugin ecosystem. Built from source including api7's apisix-runtime, which rebuilds OpenResty against current OpenSSL rather than upstream's pinned older crypto, plus the admin dashboard SPA that upstream now embeds by commit id instead of releasing separately. Runs file-driven standalone by default, so no etcd is required. Ships no prebuilt wasmtime, so proxy-wasm plugins are unavailable, and omits saml-auth because it statically links a 2019 xmlsec fork our scanner cannot inspect.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "3.19.0",
      "versions": [
        {
          "version": "3.19.0",
          "size": "31.8 MB",
          "published": "2026-10-22T07:25:48Z",
          "digest": "sha256:ffcad0370365828a819c7f6ec2c0460cda0588dcd6f63f1237f534518d9ceca1"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://apisix.apache.org",
      "source": "https://github.com/apache/apisix",
      "image": "ghcr.io/quenchworks/images/apisix"
    },
    {
      "slug": "apisix-ingress-controller",
      "name": "apisix-ingress-controller",
      "category": "Gateway",
      "summary": "The Apache APISIX Ingress Controller, the Kubernetes operator that drives an APISIX data plane. Reconciles Gateway API resources, native Ingress and APISIX's own CRDs such as ApisixRoute, ApisixUpstream and ApisixPluginConfig into APISIX configuration. Built from the ASF source release; tracks Gateway API 1.6 and needs Kubernetes 1.31 or newer.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "2.2.0",
      "versions": [
        {
          "version": "2.2.0",
          "size": "18.3 MB",
          "published": "2026-10-22T07:25:57Z",
          "digest": "sha256:73dd61b3ea64f74c023763fbb7cc430be153a3e509ec58d1d73c3e08e6d6322f"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://apisix.apache.org/docs/ingress-controller/overview/",
      "source": "https://github.com/apache/apisix-ingress-controller",
      "image": "ghcr.io/quenchworks/images/apisix-ingress-controller"
    },
    {
      "slug": "argo-events",
      "name": "argo-events",
      "category": "Workflow",
      "summary": "Argo Events, event-driven automation for Kubernetes (EventSources for webhooks, queues, schedules and cloud events; Sensors that trigger workflows, resources and HTTP calls). Built from source with the argo CLI for the argoWorkflow trigger.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "1.9.11",
      "versions": [
        {
          "version": "1.9.11",
          "size": "66.0 MB",
          "published": "2026-10-22T07:58:24Z",
          "digest": "sha256:7646cc078a756114ecbfe87c1962162b4af64c35ab7c0f2bcd535fbccf9e03e4"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://argoproj.github.io/events",
      "source": "https://github.com/argoproj/argo-events",
      "image": "ghcr.io/quenchworks/images/argo-events"
    },
    {
      "slug": "argo-rollouts",
      "name": "argo-rollouts",
      "category": "CI",
      "summary": "The Argo Rollouts controller, progressive delivery for Kubernetes (canary and blue-green Rollouts, analysis runs, traffic shaping through ingresses and meshes). Built from source with the vulnerable modules floated.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "1.9.2, 1.10.1",
      "versions": [
        {
          "version": "1.9.2",
          "size": "25.3 MB",
          "published": "2026-10-22T07:53:46Z",
          "digest": "sha256:f8804da0ea4e5e660887cd4249eb6ae58e3bb0f59d2de0b3fba3c467d39bd145"
        },
        {
          "version": "1.10.1",
          "size": "27.0 MB",
          "published": "2026-10-22T07:44:44Z",
          "digest": "sha256:3ccc2dd5d2db2c7d35b3c654d2989b954663ab0376f658589448c2e297433531"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://argoproj.github.io/rollouts",
      "source": "https://github.com/argoproj/argo-rollouts",
      "image": "ghcr.io/quenchworks/images/argo-rollouts"
    },
    {
      "slug": "argo-workflows",
      "name": "argo-workflows",
      "category": "Workflow",
      "summary": "Kubernetes-native workflow engine for orchestrating parallel jobs as DAGs. Ships the workflow-controller, the argo CLI/API server with an embedded React UI, and the argoexec executor the controller injects into every workflow pod, built from source on a hardened nonroot Wolfi base.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "4.0.15, 4.1.6, 3.7.18",
      "versions": [
        {
          "version": "4.0.15",
          "size": "100.6 MB",
          "published": "2026-10-22T14:26:16Z",
          "digest": "sha256:08d0f5f0663fdc255f5b6042861959e66483b0a26d11d55ed955bf1ef4578404"
        },
        {
          "version": "4.1.6",
          "size": "103.6 MB",
          "published": "2026-10-22T14:26:02Z",
          "digest": "sha256:ef9b9de28ce0fb58e828e288a082e7edd29db972e0a822d56295a2a42234ecac"
        },
        {
          "version": "3.7.18",
          "size": "99.4 MB",
          "published": "2026-10-22T14:25:52Z",
          "digest": "sha256:78404f7cdf3676e8e98ba3a3401681b778fce1332e3f752ded92dbcb9ced1752"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://argoproj.github.io/workflows",
      "source": "https://github.com/argoproj/argo-workflows",
      "image": "ghcr.io/quenchworks/images/argo-workflows"
    },
    {
      "slug": "argocd",
      "name": "argocd",
      "category": "GitOps",
      "summary": "Argo CD, the CNCF declarative GitOps continuous-delivery controller for Kubernetes. One multi-call binary serves every component (server, repo-server, application-controller, applicationset-controller, commit-server, notifications, cmp-server), selected by argv[0] exactly as upstream does, so the chart picks a role with a single command. Built from source with upstream's own asset pipeline, so the server really serves its React web console instead of 404ing every UI route. Ships git, git-lfs, openssh-client and gnupg for private and signature-verified repos, plus Helm 3 built from source and the Wolfi Kustomize, both of which the repo-server execs by bare name.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "3.5.6, 3.4.12, 3.3.17",
      "versions": [
        {
          "version": "3.5.6",
          "size": "113.1 MB",
          "published": "2026-10-22T14:26:35Z",
          "digest": "sha256:1f36e706f7e05c736e81fca8cd8b00d399e158db520f28c109b9c8647bcf1b27"
        },
        {
          "version": "3.4.12",
          "size": "106.9 MB",
          "published": "2026-10-22T14:26:01Z",
          "digest": "sha256:2117c67822324feb09e7142c3ba34e1b7d3c9c705cb77fbaa13eb53df68840cc"
        },
        {
          "version": "3.3.17",
          "size": "106.2 MB",
          "published": "2026-10-22T14:25:56Z",
          "digest": "sha256:229fef21226a8af37cdc1b045b968ae1345da2b0063d90bc8b011993126feef9"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://argo-cd.readthedocs.io",
      "source": "https://github.com/argoproj/argo-cd",
      "image": "ghcr.io/quenchworks/images/argocd"
    },
    {
      "slug": "aspnet",
      "name": "aspnet",
      "category": "Runtime base",
      "summary": "Hardened ASP.NET Core runtime for web apps and APIs, no SDK. Build on the dotnet image, then run here. Lines 8/9/10.",
      "tier": "standard",
      "status": "available",
      "license": "MIT",
      "licenseClean": "clean",
      "version": "10.0.113, 9.0.121",
      "versions": [
        {
          "version": "10.0.113",
          "size": "73.6 MB",
          "published": "2026-10-22T07:22:32Z",
          "digest": "sha256:6f1f25761fff45da22073fd1d757eaf58baa037ab4a5676ac0634790bb10155d"
        },
        {
          "version": "9.0.121",
          "size": "74.2 MB",
          "published": "2026-10-11T06:57:17Z",
          "digest": "sha256:fc766401176f5d913d8f7f603ac7d0336e357fb7b3b79db0d70f022b2653bfeb"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://github.com/dotnet/runtime",
      "source": "https://github.com/dotnet/runtime",
      "image": "ghcr.io/quenchworks/images/aspnet",
      "knownIssue": "Ships .NET 9 and .NET 10 only. The .NET 8 band is held out: dotnet-8-runtime/aspnet-8-runtime 8.0.127-r0 carries CVE-2026-47304 (Critical) plus three High DoS advisories, all fixed only in 8.0.129-r1, which Wolfi has not packaged (verified against the APKINDEX on 2026-08-27). The band returns as soon as that revision lands."
    },
    {
      "slug": "atlantis",
      "name": "Atlantis",
      "category": "GitOps",
      "summary": "Terraform pull-request automation that runs plan on PRs and apply from PR comments, enforcing reviewed, Git-driven infrastructure changes with state locking.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "0.48.2",
      "versions": [
        {
          "version": "0.48.2",
          "size": "77.8 MB",
          "published": "2026-10-22T14:25:13Z",
          "digest": "sha256:268a719c84e2457dae16bc6193850ed80d2e1cda2979bb535bd17fcf9b9ae7cc"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://github.com/runatlantis/atlantis",
      "source": "https://github.com/runatlantis/atlantis",
      "image": "ghcr.io/quenchworks/images/atlantis"
    },
    {
      "slug": "authelia",
      "name": "authelia",
      "category": "Identity",
      "summary": "Open-source authentication and authorization server providing single sign-on and two-factor authentication via a web portal, designed as a companion for reverse proxies. Packaged from Authelia's official prebuilt binary; needs a config plus a SQLite or PostgreSQL storage backend.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "4.39.28",
      "versions": [
        {
          "version": "4.39.28",
          "size": "23.1 MB",
          "published": "2026-10-22T07:19:22Z",
          "digest": "sha256:ab180111f174f6eaeffa177b9969fd8fab21ba21d51771084e0e788c322feba9"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://www.authelia.com",
      "source": "https://github.com/authelia/authelia",
      "image": "ghcr.io/quenchworks/images/authelia"
    },
    {
      "slug": "authentik",
      "name": "authentik",
      "category": "Secrets & identity",
      "summary": "Self-hosted identity provider (OIDC, SAML, LDAP, SCIM) with flows, policies, and application/provider management. Built clean-room from source on Wolfi as a four-language image (nodejs web UI, Go server/proxy, Rust worker, Python/Django core via uv) on a hardened nonroot base; FIPS mode is not forced and the license-gated MaxMind GeoIP download is omitted. Needs PostgreSQL and Redis at runtime, provided by the chart.",
      "tier": "standard",
      "status": "available",
      "license": "MIT",
      "licenseClean": "clean",
      "version": "2026.8.5",
      "versions": [
        {
          "version": "2026.8.5",
          "size": "267.4 MB",
          "published": "2026-10-22T14:41:14Z",
          "digest": "sha256:c1d52b291a43be4582eabc12a50bf542aa402df589c3ff83757b052ea0ac0225"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://goauthentik.io",
      "source": "https://github.com/goauthentik/authentik",
      "image": "ghcr.io/quenchworks/images/authentik"
    },
    {
      "slug": "backdrop",
      "name": "backdrop",
      "category": "Apps & productivity",
      "summary": "Backdrop CMS, the PHP content-management system forked from Drupal 7. The official release zip on a hardened Wolfi php-8.4-fpm + nginx runtime (nonroot, read-only rootfs, supervisord). Its settings.php reads the MySQL or MariaDB connection from BACKDROP_DB_* env vars, so the docroot stays read-only and only files/ (uploads, active config, backups) is writable; the CLI installer sets up the schema. Ships 1.34 and 1.35.",
      "tier": "standard",
      "status": "available",
      "license": "GPL-2.0+",
      "licenseClean": "clean",
      "version": "1.34.6, 1.35.2",
      "versions": [
        {
          "version": "1.34.6",
          "size": "75.4 MB",
          "published": "2026-10-22T11:39:45Z",
          "digest": "sha256:d0028395632f9cffd6378fcbe563ddf4d021180e0f9a4a2e8de6dbd8dd843226"
        },
        {
          "version": "1.35.2",
          "size": "75.5 MB",
          "published": "2026-10-22T11:33:38Z",
          "digest": "sha256:5098c802044985910fefa59adc6c1ec816afdc1ee1ad75ba7209ab2f671b4329"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://backdropcms.org",
      "source": "https://github.com/backdrop/backdrop/releases",
      "image": "ghcr.io/quenchworks/images/backdrop"
    },
    {
      "slug": "backing-image-manager",
      "name": "backing-image-manager",
      "category": "Storage & platform",
      "summary": "Longhorn's backing image server, built from the longhorn/backing-image-manager source with qemu-img, losetup and the filesystem tools it calls. longhorn-manager starts it on each node; drop-in for upstream's image, runs as root like upstream.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "1.13.0, 1.11.3, 1.12.1",
      "versions": [
        {
          "version": "1.13.0",
          "size": "44.0 MB",
          "published": "2026-10-22T07:24:14Z",
          "digest": "sha256:2b48b665ee462a88f9e1da3d1a8e4c4334d6b20f7787169ec569e31ce4a179f1"
        },
        {
          "version": "1.11.3",
          "size": "44.0 MB",
          "published": "2026-10-22T07:24:02Z",
          "digest": "sha256:ec0e76b1524a4cde46d92726fcc40b28773caeb4411ef05fc8331fcb0a85e756"
        },
        {
          "version": "1.12.1",
          "size": "44.0 MB",
          "published": "2026-10-22T07:23:13Z",
          "digest": "sha256:25458cc2177aacb2fd7a92e32006f9332db5c3fb68fcf629c63d95fce08811dd"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://longhorn.io",
      "source": "https://github.com/longhorn/backing-image-manager",
      "image": "ghcr.io/quenchworks/images/backing-image-manager"
    },
    {
      "slug": "bifrost",
      "name": "bifrost",
      "category": "AI gateway",
      "summary": "AI gateway giving one OpenAI-compatible API over many model providers, with load balancing and failover. Single Go binary with the web console embedded, built from source on a hardened nonroot Wolfi base; sqlite is compiled in, so nothing links it at runtime. Image only, no chart.",
      "tier": "standard",
      "status": "available",
      "license": "Apache-2.0",
      "licenseClean": "clean",
      "version": "2.2.6, 2.0.0, 2.1.1",
      "versions": [
        {
          "version": "2.2.6",
          "size": "54.2 MB",
          "published": "2026-10-22T07:58:12Z",
          "digest": "sha256:981150229849f7175188ae2c86b54410e12b5cf3c94ea4bc910ee8ba45416ab8"
        },
        {
          "version": "2.0.0",
          "size": "52.4 MB",
          "published": "2026-10-22T07:53:25Z",
          "digest": "sha256:33e539793e8105c741b66ce807c832b00bf4fb5495da5e35b93de9a178598f9d"
        },
        {
          "version": "2.1.1",
          "size": "53.8 MB",
          "published": "2026-10-22T07:46:19Z",
          "digest": "sha256:5fcd7104e917d24bf73971e23aeb3e9bb72012cdca809036a049e619a5d4a4cd"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://getbifrost.ai",
      "source": "https://github.com/maximhq/bifrost",
      "image": "ghcr.io/quenchworks/images/bifrost"
    },
    {
      "slug": "bind",
      "name": "bind",
      "category": "Coordination",
      "summary": "ISC BIND 9, the authoritative and recursive DNS server (9.20 stable line). Wolfi's source-built named, nonroot on port 5353, with a default caching-resolver config for local networks.",
      "tier": "standard",
      "status": "available",
      "license": "MPL-2.0",
      "licenseClean": "clean",
      "version": "9.20.30",
      "versions": [
        {
          "version": "9.20.30",
          "size": "16.5 MB",
          "published": "2026-10-22T07:28:22Z",
          "digest": "sha256:1775a37083a6a3b7d1d8ff23ddadef9db644d474953c678e51cb34e3f8a5ddfe"
        }
      ],
      "arches": [
        "amd64",
        "arm64"
      ],
      "upstream": "https://gitlab.isc.org/isc-projects/bind9",
      "source": "https://www.isc.org/bind/",
      "image": "ghcr.io/quenchworks/images/bind"
    }
  ]
}