Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

A 3
tigera-operator
The Tigera operator, which installs and manages Calico from an Installation resource; built from source, pinned to the Calico release the calico-*…
v1.42.224.1 MB
NetworkingstandardApache-2.0
A+
tigerbeetle
Distributed financial-grade accounting database for high-throughput double-entry bookkeeping. Ships a single self-contained static Zig binary; speaks…
v0.17.911.6 MB3 versions
DatabasestandardApache-2.0
A+
tika
Apache Tika server, the REST API for extracting text and metadata from PDF, Office, image, archive and 1000+ other formats. The Apache 4.x release on…
v4.1.0132.9 MB
SearchstandardApache-2.0
D 184
timescaledb
PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for…
v2.31.0143.7 MB2 versions
Time seriesstandardApache-2.0
D 4
timestamp-authority
The Sigstore Timestamp Authority, an RFC 3161 timestamping server that countersigns artifact hashes, with file, KMS and Tink signers. Built from…
v2.1.612.5 MB3 versions
Security & supply chainstandardApache-2.0
A+
tomcat
Apache Tomcat, the widely used open-source Java servlet container and web/application server for running Jakarta Servlet, JSP, and WebSocket web…
v11.0.2788.0 MB
GatewaycriticalApache-2.0
A+
tomee
Apache TomEE, Tomcat with the Jakarta EE Web Profile stack (OpenEJB, OpenWebBeans, MyFaces, CXF) for running Jakarta EE applications.
v10.2.0135.7 MB
GatewaystandardApache-2.0
D 5
Traefik
Cloud-native reverse proxy and load balancer with automatic service discovery, dynamic config, and built-in Let's Encrypt TLS.
v3.7.1654.9 MB
GatewaystandardMIT
D 19
trino
Trino, the distributed SQL query engine for federated analytics. Assembled from upstream's release assets on Wolfi openjdk-25 with the jmx, memory,…
v483742.1 MB
Databases & enginesstandardApache-2.0
D 4
trivy
Aqua Security's all-in-one vulnerability, misconfiguration, secret, and SBOM scanner for images, filesystems, and repositories. Image only, no chart.
v0.76.152.7 MB
Security & supply chainstandardApache-2.0
D 4
trivy-operator
Trivy Operator, the Kubernetes operator that continuously scans workloads, configurations, RBAC and the cluster with Trivy and stores the results as…
v0.35.048.5 MB2 versions
Security & supply chainstandardApache-2.0
D 4
trivy-scanner
The QuenchWorks trivy build with a busybox userland, for the scan Jobs Trivy Operator launches (they run a shell command line around trivy). Image…
v0.76.156.7 MB2 versions
Security & supply chainstandardApache-2.0