Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 22
kubevuln
Kubescape's image vulnerability scanner service (kubevuln), which builds SBOMs of running images and matches them against vulnerability data. Built…
v0.3.56579.3 MB
Security & supply chainstandardApache-2.0
D 6
kubo
Kubo, the reference IPFS node, for content-addressed storage and retrieval (RPC API, HTTP gateway, libp2p swarm over TCP and QUIC). Built from source…
v0.43.127.1 MB3 versions
Object storagestandardMIT OR Apache-2.0
A 6
kuma
CNCF service mesh control plane (Envoy-based) for multi-zone and multi-cluster meshes. Ships kuma-cp and kumactl with an embedded GUI, built from…
v3.0.059.1 MB2 versions
Coordination & meshstandardApache-2.0
A 2
kured
kured, the Kubernetes reboot daemon: it watches each node for a reboot-required sentinel and reboots nodes one at a time behind a lock, draining them…
v1.23.028.1 MB3 versions
CoordinationstandardApache-2.0
A+
kvrocks
Apache Kvrocks, a distributed key-value database on RocksDB that speaks the Redis protocol, keeping data on disk instead of in RAM. Built from source…
v2.17.024.9 MB
CachestandardApache-2.0
D 44
kyverno
Kubernetes-native policy engine for validating, mutating, and generating resources with no new language. Ships the controllers and CLI as static Go…
v1.19.2256.9 MB
Security & supply chainstandardApache-2.0
D 16
label-studio
Label Studio, the open-source data labeling tool for text, images, audio, video and time series, with a web UI and a token-authenticated REST API.…
v1.23.2342.8 MB
Machine learning & AIstandardApache-2.0
C 6
linkerd-cni
Linkerd's CNI plugin (the alternative to the proxy-init init container), its installer and the Rust cni-repair-controller, built from source from the…
v1.7.019.3 MB
Coordination & meshstandardApache-2.0
A 3
linkerd-control-plane
Linkerd's control plane `controller` binary (destination, identity, proxy-injector, sp-validator, service-mirror, heartbeat -- one binary, role…
v26.10.120.5 MB4 versions
Coordination & meshstandardApache-2.0
C 4
linkerd-extension-init
Linkerd extension-init, the Job the Linkerd Viz chart runs to label its namespace (extension and pod-security labels), built from source in Rust from…
v0.1.127.8 MB
Coordination & meshstandardApache-2.0
C 4
linkerd-policy-controller
Linkerd's Rust policy controller (policy-controller), serving Linkerd's authorization-policy CRDs to the proxy data plane over gRPC. Built from…
v26.10.114.7 MB4 versions
Coordination & meshstandardApache-2.0
C 8
linkerd-proxy
linkerd2-proxy, Linkerd's Rust data-plane sidecar (mTLS termination and meshed traffic routing) -- a from-scratch Rust proxy with no bundled C++…
v2.370.016.2 MB4 versions
Coordination & meshstandardApache-2.0