Images
29 imagesCI/CD & registry images
Hardened container images in the ci/cd & registry category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.
0 CVE
flux-source-watcher
Flux source-watcher, the GitOps controller that composes and decorates source artifacts with ArtifactGenerator objects, producing new artifacts from…
image v2.2.4
CI/CD والسجلّstandardApache-2.00 CVE
gitlab-runner
GitLab Runner, the agent that runs GitLab CI jobs, here for the Kubernetes executor. Built from source (static Go, golang.org/x and otel floated)…
image v19.3.2, 19.4.1, 19.5.0
CI/CD والسجلّstandardMIT0 CVE
hadolint
Dockerfile linter. Checks Dockerfiles against best-practice rules and runs ShellCheck on every RUN instruction; pipe a Dockerfile in with "-". Image…
image v2.15.1
CI/CD والسجلّstandardGPL-3.00 CVE
jenkins
The leading open-source automation server for building, testing, and deploying software, with thousands of plugins. Ships the…
image v2.580.1, 2.572
CI/CD والسجلّstandardMIT0 CVE
jenkins-inbound-agent
Jenkins inbound (JNLP/websocket) build agent — the remoting agent.jar plus launch script on a hardened Wolfi JRE, connecting back to a Jenkins…
image v2.566, 2.565, 2.564
CI/CD والسجلّstandardMIT0 CVE
kubectl
Hardened kubectl image with the common cluster toolbelt (helm, kustomize, jq, a busybox shell) — the 0-CVE answer to alpine/k8s and bitnami/kubectl…
image v1.37.1, 1.34.12
CI/CD والسجلّstandardApache-2.00 CVE
opentofu
Open-source, community-governed fork of Terraform, an infrastructure-as-code CLI. Image only, no chart.
image v1.13.2
CI/CD والسجلّstandardMPL-2.00 CVE
pulumi
Infrastructure-as-code CLI for managing cloud resources with general-purpose programming languages. Image only, no chart.
image v3.270.0, 3.271.0, 3.268.0
CI/CD والسجلّstandardApache-2.00 CVE
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
image v44.176.4
CI/CD والسجلّstandardAGPL-3.00 CVE
selenium-node-firefox
Selenium Grid 4 Firefox node, the upstream release jar with Wolfi Firefox and geckodriver, headless, on a Wolfi JRE 21. A Chromium node waits for a…
image v4.50.0, 4.51.0
CI/CD والسجلّstandardApache-2.00 CVE
selenium-server
Selenium Grid 4 server (hub, router, distributor, session queue, event bus, node, standalone; role picked by argument), the upstream release jar on a…
image v4.50.0, 4.51.0
CI/CD والسجلّstandardApache-2.00 CVE
shellcheck
Static analysis for shell scripts. Flags quoting bugs, unsafe globbing, and portability issues in sh and bash; pipe a script in with "-" or mount a…
image v0.11.0
CI/CD والسجلّstandardGPL-3.0