Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 4
syft
Anchore's CLI for generating Software Bills of Materials (SBOMs) from container images and filesystems. Image only, no chart.
v1.55.029.1 MB
Security & supply chainstandardApache-2.0
A 9
tailscale
Tailscale node (tailscaled, the tailscale CLI and containerboot), the WireGuard mesh VPN client. Upstream's container layout and TS_* environment;…
v1.102.527.0 MB3 versions
Coordination & meshstandardBSD-3-Clause
D 18
tekton
Kubernetes-native CI/CD pipelines. Ships the Tekton Pipelines controller, webhook, resolvers, and pod-injected helper binaries, built from source on…
v1.17.0118.4 MB
CI/CD & registrystandardApache-2.0
D 5
telegraf
Plugin-driven agent that collects metrics, logs, and events from systems and services and writes them to time-series backends. Image only, no chart.
v1.40.288.1 MB3 versions
ObservabilitystandardMIT
D 6
Tempo
Distributed tracing backend from Grafana that ingests OpenTelemetry, Jaeger, and Zipkin spans and stores them cheaply in object storage. Licensed…
v3.1.141.6 MB2 versions
ObservabilitystandardAGPL-3.0
D 12
Temporal
Durable workflow orchestration engine that persists execution state so long-running, multi-step processes survive crashes and resume exactly where…
v1.32.167.0 MB
WorkflowstandardMIT
F 18
Temporal CLI
Command-line client and built-in dev server for Temporal, used to start workflows, inspect history, and run a local cluster.
v1.9.145.4 MB3 versions
WorkflowstandardMIT
D 12
terragrunt
Terragrunt, the thin wrapper that keeps Terraform and OpenTofu configurations DRY, built from source with the 0-CVE OpenTofu build and git beside it.…
v1.2.088.5 MB
CI/CD & registrystandardMIT
D 6
terralist
Terralist, a private Terraform and OpenTofu registry for modules and providers (registry protocol, web UI, OAuth login, API keys). Built from source,…
v0.11.048.6 MB
RegistrystandardMPL-2.0
A 4
tetragon
Tetragon eBPF runtime-security agent and the tetra CLI, built from source. Watches process execution, file access and network activity in the kernel,…
v1.7.182.5 MB
Security & supply chainstandardApache-2.0
C 5
tetragon-operator
Tetragon's operator, which installs and maintains the TracingPolicy and PodInfo CRDs. Image only, no chart of its own; the tetragon chart deploys it.
v1.7.117.3 MB
Security & supply chainstandardApache-2.0
D 6
thanos
Highly-available Prometheus setup with unlimited metric retention via object storage, adding a global query view, downsampling, and compaction across…
v0.42.435.8 MB
ObservabilitystandardApache-2.0