Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

C 4
rclone
Command-line program to sync files and directories to and from dozens of cloud storage providers. Image only, no chart.
v1.75.229.5 MB
Storage & platformstandardMIT
A+
Redis
In-memory key-value store used as a cache, message broker, and ephemeral datastore. Shipped under AGPL (not permissive); Valkey is the BSD-licensed…
v8.10.218.8 MB
CachecriticalAGPL-3.0
A 1
redis-exporter
Prometheus exporter that scrapes Redis and Valkey runtime stats and exposes them as metrics for dashboards and alerts.
v1.95.04.4 MB4 versions
Metrics/ExportercriticalMIT
D 4
redmine
Redmine, the Ruby on Rails project management and issue tracker (issues, wikis, time tracking, Gantt, repositories, REST API) backed by PostgreSQL.…
v7.0.268.6 MB
Apps & productivitystandardGPL-2.0
A 3
rekor-tiles
Rekor v2, the Sigstore transparency log, rebuilt on Trillian Tessera tiles: it needs no Trillian or MySQL. Built from source with the POSIX storage…
v2.3.08.6 MB3 versions
Security & supply chainstandardApache-2.0
A 2
reloader
Stakater Reloader, the Kubernetes controller that rolls Deployments, StatefulSets and DaemonSets when a ConfigMap or Secret they use changes. Built…
v1.4.2215.1 MB
CoordinationstandardApache-2.0
C 7
renovate
Automated dependency-update CLI that opens PRs to keep dependencies current, on a hardened Wolfi Node runtime. Image only, no chart.
v44.176.4123.9 MB
CI/CD & registrystandardAGPL-3.0
A+
rethinkdb
RethinkDB, the realtime document database with changefeeds that push query results to clients as data changes, plus a web admin UI. From Wolfi's…
v2.4.428.4 MB
Databases & enginesstandardApache-2.0
D 22
rook
The Rook Ceph operator, which runs Ceph clusters on Kubernetes (block, object and file storage through CRDs). Built from source with its vulnerable…
v1.21.0418.2 MB
Storage & platformstandardApache-2.0
A 3
rqlite
Lightweight, distributed relational database built on SQLite and Raft. Ships rqlited and the rqlite CLI as static (musl) Go binaries on a hardened…
v10.6.419.7 MB3 versions
RelationalstandardMIT
A+
ruby
Hardened Ruby interpreter with Bundler, a base image to FROM for Ruby apps. Latest 3 stable lines (3.2/3.3/3.4).
v4.0.726.4 MB2 versions
Language runtimestandardRuby
A+
rust
Hardened Rust toolchain (cargo plus rustc) for build stages; ship the compiled binary on the static base. Latest 3 stable lines (1.94/1.95/1.96).
v1.99.1362.0 MB2 versions
Language runtimestandardMIT OR Apache-2.0