Images

50 images

Security & supply chain images

Hardened container images in the security & supply chain category. Built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest.

0 CVE
kubescape-synchronizer
Kubescape's synchronizer, which keeps Kubernetes objects and scan results in sync between the cluster and a backend. Built from source.
image v0.0.169
Security & supply chainstandardApache-2.0
0 CVE
kubevuln
Kubescape's image vulnerability scanner service (kubevuln), which builds SBOMs of running images and matches them against vulnerability data. Built…
image v0.3.565
Security & supply chainstandardApache-2.0
0 CVE
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
image v1.19.2
Security & supply chainstandardApache-2.0
0 CVE
notation
Notation, the Notary Project CLI to sign and verify container images and OCI artifacts against trust policies. Built from source (static Go). Image…
image v1.3.2
Security & supply chainstandardApache-2.0
0 CVE
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
image v1.21.3
Security & supply chainstandardApache-2.0
0 CVE
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
image v3.21.1, 3.22.2, 3.23.1
Security & supply chainstandardApache-2.0
0 CVE
openscap
OpenSCAP, the SCAP compliance scanner (oscap for XCCDF and OVAL evaluation, datastream validation and reports), with the scap-security-guide content,…
image v1.4.5
Security & supply chainstandardLGPL-2.1+
0 CVE
oras
ORAS, the CLI that pushes and pulls arbitrary artifacts (SBOMs, signatures, Helm charts, any file) to and from OCI registries. Built from source…
image v1.3.5
Security & supply chainstandardApache-2.0
0 CVE
podman
Podman, the daemonless container engine with a Docker-compatible CLI, built from source and run rootless as uid 1001 with crun, conmon, netavark and…
image v6.0.2, 6.1.4
Security & supply chainstandardApache-2.0
0 CVE
polaris
Fairwinds Polaris, the Kubernetes configuration validator. Audits running workloads or YAML files against best-practice checks (security contexts,…
image v10.0.0, 10.1.8, 10.2.5
Security & supply chainstandardApache-2.0
0 CVE
policy-reporter
Policy Reporter, Kyverno's PolicyReport aggregator. Watches PolicyReport results from Kyverno and other engines, serves them over a REST API and…
image v3.10.0, 3.11.1, 3.9.0
Security & supply chainstandardMIT
0 CVE
rekor-tiles
Rekor v2, the Sigstore transparency log, rebuilt on Trillian Tessera tiles: it needs no Trillian or MySQL. Built from source with the POSIX storage…
image v2.2.1, 2.1.0, 2.3.0
Security & supply chainstandardApache-2.0