Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

D 7
ory-hydra
Ory Hydra, the OAuth 2.0 and OpenID Connect provider. Built from source like upstream's Linux release (cgo, sqlite, hsm, json1); one binary serves…
v26.2.020.1 MB
IdentitystandardApache-2.0
D 16
percona-xtradb-cluster-operator
The Percona Operator for MySQL based on Percona XtraDB Cluster: synchronous multi-primary Galera clusters with HAProxy or ProxySQL, backups and…
v1.20.066.5 MB3 versions
Databases & enginesstandardApache-2.0
A 1
perl
Hardened Perl interpreter for scripts, text processing, and tooling. A base image to FROM for Perl workloads. Latest stable (5).
v5.44.014.3 MB
Language runtimestandardArtistic-1.0-Perl OR GPL-1.0+
F 20
perses
CNCF dashboards and observability visualization tool with an embedded React UI and 24 default panel/datasource plugins. From source (Node UI build…
v0.55.0146.5 MB
ObservabilitystandardApache-2.0
F 22
pgadmin
pgAdmin 4, the web administration and development UI for PostgreSQL (query tool, ERD, schema diff, backup and restore). The official wheel under…
v9.18236.9 MB
RelationalstandardPostgreSQL
A+
pgbouncer
Lightweight connection pooler for PostgreSQL that fronts thousands of client connections with a small backend pool, cutting per-connection overhead.
v1.26.111.3 MB3 versions
RelationalstandardISC
A+
pgpool
PostgreSQL connection pooler, load balancer and query router. Pools client connections, spreads read-only queries across streaming-replication…
v4.7.317.4 MB3 versions
RelationalstandardHPND
A+
php
Hardened PHP CLI with common extensions, a base image to FROM for PHP apps. Latest 3 stable lines (8.3/8.4/8.5).
v8.5.1248.7 MB3 versions
Language runtimestandardPHP-3.01
D 5
phpmyadmin
phpMyAdmin, the web console for MySQL and MariaDB. Built from the official release tarball on a hardened Wolfi php-8.3-fpm + nginx runtime (nonroot,…
v5.2.368.6 MB
Apps & productivitystandardGPL-2.0
D 18
pinniped
Pinniped, identity services for Kubernetes (the Concierge federates cluster login to an OIDC or LDAP provider, the Supervisor is an OIDC issuer…
v0.47.047.4 MB
IdentitystandardApache-2.0
D 9
plone
Plone, the enterprise CMS on Zope; this is the Plone 6 backend (Products.CMFPlone with the plone.restapi REST API) that a Volto frontend talks to.…
v6.2.2120.6 MB
Apps & productivitystandardGPL-2.0
D 6
pnpm
Node base image with pnpm preinstalled via corepack, used as the build stage for pnpm projects. Lines 10/11.
v12.10.178.1 MB2 versions
Build toolstandardMIT