Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 8
keda
Kubernetes event-driven autoscaler that scales workloads based on external event sources (queues, streams, metrics). Ships the operator and metrics…
v2.21.087.2 MB
CoordinationstandardApache-2.0
D 6
Keycloak
Open-source identity and access management server providing SSO, user federation, and OAuth2/OIDC and SAML for apps and APIs.
v26.8.1231.5 MB2 versions
IdentitystandardApache-2.0
D 6
kfp-api-server
The Kubeflow Pipelines API server, which stores pipelines, runs, experiments and recurring runs in MySQL and compiles each run to an Argo Workflow.…
v2.17.234.2 MB
Machine learning & AIstandardApache-2.0
D 6
kfp-driver
The Kubeflow Pipelines v2 driver, the step Argo runs before every task to resolve inputs, check the cache and record executions in ML Metadata. Built…
v2.17.226.9 MB
Machine learning & AIstandardApache-2.0
D 17
kfp-frontend
The Kubeflow Pipelines UI, the React client and the Node server that serves it and proxies the API server, artifacts and pod logs. Built from source…
v2.17.270.1 MB
Machine learning & AIstandardApache-2.0
D 6
kfp-launcher
The Kubeflow Pipelines v2 launcher, a static binary copied into every task container that runs the user command and moves input and output artifacts…
v2.17.225.5 MB
Machine learning & AIstandardApache-2.0
A 3
kfp-persistence-agent
The Kubeflow Pipelines persistence agent, which watches Argo Workflows and ScheduledWorkflows and reports run state back to the API server. Built…
v2.17.215.6 MB
Machine learning & AIstandardApache-2.0
A 3
kfp-scheduled-workflow-controller
The Kubeflow Pipelines ScheduledWorkflow controller, which starts recurring and cron-scheduled pipeline runs. Built from source.
v2.17.218.3 MB
Machine learning & AIstandardApache-2.0
F 8
kgateway
kgateway, the CNCF Gateway API control plane that succeeded Gloo Edge. Watches Gateway, HTTPRoute, GRPCRoute and its own gateway.kgateway.dev policy…
v2.4.785.1 MB2 versions
GatewaystandardApache-2.0
F 4
kgateway-envoy
The kgateway data plane, upstream's envoy-wrapper rebuilt clean-room: the QuenchWorks hardened Wolfi Envoy binary plus kgateway's own envoyinit shim,…
v2.4.759.2 MB2 versions
GatewaystandardApache-2.0
D 6
ko
ko, the builder that turns Go applications into container images with no Dockerfile. Built from the release tag as one static binary, shipped with…
v0.19.193.2 MB2 versions
Security & supply chainstandardApache-2.0
A+
kong
API gateway and ingress controller on a patched OpenResty, with routing, auth, rate limiting, and a plugin ecosystem. Built from source against…
v3.9.446.0 MB
GatewaystandardApache-2.0