Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

A+
nifi
Apache NiFi, the visual dataflow engine for routing, transforming and moving data between systems. Assembled from Apache's binary distribution on…
v2.12.0866.3 MB
WorkflowstandardApache-2.0
C 4
node
Hardened Node.js runtime with npm, a 0-CVE signed nonroot base image for JavaScript apps. Active LTS lines (20/22/24).
v26.12.160.6 MB3 versions
Language runtimestandardMIT
A 3
node-exporter
Prometheus exporter for host-level hardware and OS metrics (CPU, memory, disk, network) on Linux machines.
v1.12.16.5 MB
Metrics/ExporterstandardApache-2.0
A 1
notation
Notation, the Notary Project CLI to sign and verify container images and OCI artifacts against trust policies. Built from source (static Go). Image…
v1.3.24.2 MB
Security & supply chainstandardApache-2.0
A+
nsq
Realtime distributed messaging platform. Ships nsqd, nsqlookupd, and nsqadmin as static Go binaries on a hardened nonroot Wolfi base; nsqd data path…
v1.3.011.9 MB3 versions
MessagingstandardMIT
D 4
ntfy
Simple HTTP-based pub-sub notification service for sending push notifications to phones and desktops from any script. From source with the web UI…
v2.32.021.4 MB3 versions
MessagingstandardApache-2.0
D 7
oauth2-proxy
Reverse-proxy authentication layer that secures upstream apps by delegating sign-in to OIDC and OAuth2 providers.
v7.15.510.6 MB
Secrets & identitystandardMIT
D 15
odoo
Odoo Community Edition, the Python ERP and business apps suite (CRM, sales, inventory, accounting, website) backed by PostgreSQL. Built from the…
v19.0.20261022464.1 MB
Apps & productivitystandardLGPL-3.0
A 3
ollama
Local LLM runtime that pulls, runs, and serves open models (Llama, Gemma, Qwen, DeepSeek, and more) behind a simple REST API. CPU-only image; the…
v0.40.81.7 GB3 versions
Machine learning & AIstandardMIT
A 3
opa
Open Policy Agent, the CNCF general-purpose policy engine. Evaluates Rego policies over JSON and YAML to enforce authorization, admission control,…
v1.21.314.5 MB
Security & supply chainstandardApache-2.0
A 3
opa-gatekeeper
OPA Gatekeeper, the Kubernetes admission controller for Rego policies (ConstraintTemplates and Constraints, validating and mutating webhooks, audit…
v3.23.124.5 MB3 versions
Security & supply chainstandardApache-2.0
D 9
OpenBao
Open-source secrets and encryption management for tokens, keys, and certificates, with dynamic secrets and leasing. The Linux Foundation MPL-2.0…
v2.7.141.3 MB
SecretsstandardMPL-2.0