Images

433 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 433 available now.

A+
sonar-scanner-cli
SonarScanner CLI, the standalone scanner that analyzes a project and pushes results to a SonarQube server. Bundles its own OpenJDK. Image only, no…
v8.1.0.638985.1 MB
CI/CD & registrystandardLGPL-3.0
D 7
spark
Apache Spark, the unified batch and stream analytics engine (SQL, streaming, MLlib, Kubernetes scheduling). Built from source with the Hive and YARN…
v4.2.0487.9 MB
Databases & enginesstandardApache-2.0
D 6
spicedb
Zanzibar-style authorization database for fine-grained permissions over gRPC. From source on a hardened nonroot Wolfi base; the operator supplies the…
v1.57.025.6 MB2 versions
IdentitystandardApache-2.0
D 16
spire
SPIRE, the SPIFFE runtime that attests nodes and workloads and issues them short-lived X.509 and JWT identities (spire-server and spire-agent in one…
v1.15.567.7 MB
IdentitystandardApache-2.0
A+
squid
Caching forward proxy for HTTP and HTTPS (CONNECT). Pods reach the outside through it, and it caches repeat fetches in memory. The default config…
v7.619.3 MB
CachestandardGPL-2.0+
A+
static
Tiny static base for self-contained binaries from Go or Rust. Nonroot, no shell, no package manager. The only image tagged :latest.
v20260621592.9 KB
Runtime basestandardMIT
D 20
step-ca
Online private certificate authority and ACME server for issuing X.509 and SSH certificates. Single static Go binary on a hardened nonroot Wolfi…
v0.30.229.9 MB
Security & supply chainstandardApache-2.0
D 11
step-issuer
step-issuer, smallstep's cert-manager external issuer. StepIssuer and StepClusterIssuer resources sign cert-manager CertificateRequests through a…
v0.12.018.4 MB3 versions
Security & supply chainstandardApache-2.0
D 10
storm
Apache Storm, a distributed real-time stream processing system; one image runs Nimbus, the supervisor, the UI and the log viewer.
v3.1.0302.4 MB
MessagingstandardApache-2.0
D 8
strimzi-kafka
Strimzi's Kafka image, the one the Strimzi operator runs brokers, controllers, Connect and Kafka Exporter from. Kafka with Strimzi's run scripts and…
v1.3.0-kafka-4.3.1262.0 MB2 versions
MessagingstandardApache-2.0
D 3
strimzi-operator
Strimzi, the Kubernetes operator that runs and manages Apache Kafka clusters, topics and users. One image carries the cluster operator, topic…
v1.3.0159.7 MB2 versions
MessagingstandardApache-2.0
A 5
support-bundle-kit
Rancher's support-bundle-kit, which Longhorn and Harvester run to collect cluster objects, logs and node files into a support bundle. Built from…
v1.0.253.9 MB4 versions
Storage & platformstandardApache-2.0