Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

F 2
envoy
Cloud-native L7 proxy and communication bus, the data plane behind API gateways and service meshes. HTTP/gRPC routing, load balancing, rich…
v1.38.146.5 MB3 versions
GatewaystandardApache-2.0
D 6
envoy-gateway
Gateway API control plane from the Envoy project. Watches Gateway, HTTPRoute and its own policy CRDs and programs Envoy over xDS, provisioning and…
v1.9.239.5 MB2 versions
GatewaystandardApache-2.0
A+
erlang
Hardened Erlang/OTP runtime on the BEAM VM, built for highly concurrent, fault-tolerant systems. Latest stable lines (27/28/29).
v29.1.264.1 MB3 versions
Language runtimestandardApache-2.0
A 8
etcd
Distributed, strongly consistent key-value store using Raft consensus. The backing store for Kubernetes and a building block for service coordination…
v3.7.222.1 MB
CoordinationcriticalApache-2.0
A+
excalidraw
Open-source virtual whiteboard for sketching hand-drawn-style diagrams. Self-hostable as a static SPA served by hardened nginx, with no backend or…
v0.18.129.4 MB
Apps & productivitystandardMIT
A 3
external-dns
Synchronizes Kubernetes Services and Ingresses with DNS providers so records are managed automatically.
v0.23.038.0 MB
Coordination & meshstandardApache-2.0
D 6
external-secrets
External Secrets Operator, the CNCF operator that syncs secrets from external APIs (AWS/GCP/Azure Secrets Manager, Vault, and many more) into…
v2.13.052.2 MB3 versions
Security & supply chainstandardApache-2.0
A 3
fabric-orderer
Hyperledger Fabric orderer, the ordering service node that sequences transactions into blocks over Raft (and BFT on 3.x) and serves the channel…
v3.1.510.4 MB2 versions
CoordinationstandardApache-2.0
A 3
fabric-peer
Hyperledger Fabric peer, the permissioned-blockchain node that holds the ledger and world state, endorses transactions and runs chaincode (with the…
v3.1.515.3 MB2 versions
CoordinationstandardApache-2.0
D 10
falco
Falco runtime threat detection, built from source with falcosecurity/libs and the modern eBPF probe against Wolfi system libraries (OpenSSL, zlib,…
v0.45.1204.2 MB
Security & supply chainstandardApache-2.0
A 3
FerretDB
MongoDB-compatible document database that translates the MongoDB wire protocol onto PostgreSQL via the DocumentDB extension. The clean-license…
v2.7.010.5 MB
DocumentstandardApache-2.0
B 4
filebrowser
Web-based file manager with a built-in UI, users, and share links. From source (Vite UI embedded in a static Go binary) on a hardened nonroot Wolfi…
v2.63.2315.6 MB2 versions
Apps & productivitystandardApache-2.0