Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 2
flyway
Flyway Community, versioned SQL database migrations for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite and more. The release's Java tree on a…
v13.11.1327.9 MB
Databases & enginesstandardApache-2.0
C 4
forgejo
Self-hosted lightweight Git forge (a community Gitea fork) with issues, PRs, CI, and packages. From source with the web UI embedded (no Node at…
v16.0.674.0 MB2 versions
GitstandardGPL-3.0+
F 8
friendica
Friendica, the federated social network server (ActivityPub, Diaspora, OStatus). The official friendica-full release on a hardened Wolfi php-8.3-fpm…
v2026.05103.4 MB
Apps & productivitystandardAGPL-3.0+
D 2
frr
FRRouting, the routing protocol suite (BGP, OSPF, IS-IS, BFD, PIM), from Wolfi's frr package. Runs as root like upstream's image, with upstream's…
v10.6.148.6 MB
Coordination & meshstandardGPL-2.0
D 6
fulcio
Fulcio, the Sigstore certificate authority: it issues short-lived code-signing certificates bound to OIDC identities, for keyless signing with…
v1.8.812.2 MB2 versions
Security & supply chainstandardApache-2.0
C 4
Garage
Lightweight, S3-compatible object store for small, self-hosted, geo-distributed deployments that stays available across node failures. Licensed AGPL;…
v2.4.129.9 MB2 versions
Object storagestandardAGPL-3.0
F 64
ghost
Open-source Node.js publishing platform for blogs, newsletters, and membership sites. Packaged from Ghost's official npm distribution on a hardened…
v6.72.0168.7 MB2 versions
Apps & productivitystandardMIT
C 4
Gitea
Lightweight self-hosted Git service with repositories, issues, pull requests, and built-in CI/CD (Actions). A low-footprint GitHub alternative.
v28.2.071.5 MB2 versions
GitstandardMIT
D 6
gitlab-runner
GitLab Runner, the agent that runs GitLab CI jobs, here for the Kubernetes executor. Built from source (static Go, golang.org/x and otel floated)…
v19.5.035.6 MB3 versions
CI/CD & registrystandardMIT
A 1
gitleaks
Gitleaks, the secret scanner for git history, directories and stdin. Built from source (static Go) with the git client included for history scans.…
v8.30.131.1 MB
Security & supply chainstandardMIT
D 8
gitness
Self-hosted Git forge with built-in CI/CD pipelines (harness/gitness, open-source edition). Go backend with the React web UI compiled in via…
v3.3.062.5 MB
GitstandardApache-2.0
A+
go
Hardened Go toolchain for compiling binaries in a build stage; pair the output with the static base for the runtime. Latest 3 stable lines…
v1.27.356.1 MB2 versions
Language runtimestandardBSD-3-Clause