Image directory

96 hardened images across 8 categories.

All Languages & RuntimesDatabasesCaches, Queues & MessagingWeb Servers & ProxiesObservabilityInfrastructureKubernetes, CI & IaCApps

Languages & Runtimes

Languages & Runtimes python

Shell-less Python 3 runtime built on Wolfi.

3 CVEs 63 MB · today
Languages & Runtimes node-slim

Shell-less Node.js runtime built on Wolfi.

2 CVEs 156 MB · today
Languages & Runtimes bun

Shell-less Bun JavaScript runtime built on Wolfi.

Clean 96 MB · today
Languages & Runtimes go

Go builder image built on Wolfi.

2 CVEs 727 MB · today
Languages & Runtimes java

Shell-less OpenJDK 21 JRE built on Wolfi.

2 CVEs 251 MB · today
Languages & Runtimes ruby

Ruby runtime built from source via melange.

3 CVEs 81 MB · today
Languages & Runtimes php

PHP runtime built from source via melange.

2 CVEs 67 MB · today
Languages & Runtimes dotnet

.NET runtime built on Wolfi.

2 CVEs 142 MB · today
Languages & Runtimes deno

Shell-less Deno TypeScript runtime built on Wolfi.

2 CVEs 109 MB · today

Databases

Databases mysql

MySQL LTS built from source via melange.

2 CVEs 178 MB · today
Databases mariadb

MariaDB LTS built from source via melange.

2 CVEs 86 MB · today
Databases postgres-slim

PostgreSQL built on Wolfi.

2 CVEs 357 MB · today
Databases patroni

Shell-less Patroni PostgreSQL high-availability supervisor built on Wolfi.

2 CVEs 460 MB · today
Databases pgbouncer

Shell-less PgBouncer PostgreSQL connection pooler built from source via melange.

2 CVEs 16 MB · today
Databases sqlite

Shell-less SQLite built on Wolfi.

Clean 16 MB · today
Databases opensearch

OpenSearch 3.x on Wolfi with OpenJDK 21.

4 CVEs 433 MB · today
Databases cassandra

Apache Cassandra wide-column database with custom jlink JRE.

24 CVEs 160 MB · today
Databases solr

Apache Solr search server with custom jlink JRE.

66 CVEs 398 MB · today

Caches, Queues & Messaging

Caches, Queues & Messaging redis-slim

Shell-less Redis built from source via melange.

3 CVEs 25 MB · today
Caches, Queues & Messaging valkey

Shell-less Valkey built from source via melange.

2 CVEs 25 MB · today
Caches, Queues & Messaging memcached

Shell-less Memcached built from source via melange.

2 CVEs 15 MB · today
Caches, Queues & Messaging kafka

Apache Kafka with custom jlink JRE, KRaft mode.

21 CVEs 213 MB · today
Caches, Queues & Messaging zookeeper

Apache ZooKeeper coordination service with custom jlink JRE.

23 CVEs 71 MB · today
Caches, Queues & Messaging pulsar

Apache Pulsar messaging and streaming server with custom jlink JRE.

1 CVE 335 MB · today
Caches, Queues & Messaging rabbitmq

RabbitMQ with Wolfi Erlang/OTP.

2 CVEs 203 MB · today
Caches, Queues & Messaging nats

Shell-less NATS server built from source via melange.

1 CVE 16 MB · today
Caches, Queues & Messaging mosquitto

Shell-less Eclipse Mosquitto MQTT broker.

3 CVEs 26 MB · today

Web Servers & Proxies

Web Servers & Proxies tomcat

Hardened Apache Tomcat servlet container with custom jlink JRE (default webapps removed).

Clean 94 MB · today
Web Servers & Proxies nginx

Shell-less Nginx built on Wolfi.

2 CVEs 17 MB · today
Web Servers & Proxies httpd

Apache HTTP Server built on Wolfi.

3 CVEs 76 MB · today
Web Servers & Proxies caddy

Shell-less Caddy web server built from source via melange.

1 CVE 52 MB · today
Web Servers & Proxies haproxy

Shell-less HAProxy built from source via melange.

2 CVEs 20 MB · today
Web Servers & Proxies traefik

Shell-less Traefik reverse proxy built from source via melange.

1 CVE 174 MB · today
Web Servers & Proxies envoy

Shell-less Envoy proxy.

Clean 111 MB · today
Web Servers & Proxies oauth2-proxy

Shell-less OAuth2 Proxy (OIDC/OAuth2 authenticating reverse proxy), built from source via melange.

1 CVE 27 MB · today

Observability

Observability prometheus

Prometheus monitoring server built from source via melange.

2 CVEs 167 MB · today
Observability alertmanager

Prometheus Alertmanager built from source via melange.

2 CVEs 52 MB · today
Observability victoria-metrics

VictoriaMetrics time-series database built from source via melange.

Clean 18 MB · today
Observability thanos

Shell-less Thanos HA Prometheus long-term storage.

5 CVEs 93 MB · today
Observability mimir

Grafana Mimir long-term Prometheus storage.

2 CVEs 183 MB · today
Observability jaeger

Jaeger distributed tracing backend built from source via melange.

1 CVE 67 MB · today
Observability loki

Loki log aggregation server built from source via melange.

1 CVE 147 MB · today
Observability tempo

Shell-less Grafana Tempo distributed tracing backend.

1 CVE 104 MB · today
Observability otelcol

OpenTelemetry Collector built from source via melange.

1 CVE 29 MB · today
Observability fluent-bit

Fluent Bit log processor and forwarder built from source via melange.

2 CVEs 101 MB · today
Observability telegraf

Telegraf metrics collection agent built from source via melange.

1 CVE 301 MB · today
Observability vector

Shell-less Vector observability data pipeline built on Wolfi.

13 CVEs 151 MB · today
Observability node-exporter

Shell-less Prometheus Node Exporter for hardware and OS metrics.

1 CVE 16 MB · today
Observability blackbox-exporter

Shell-less Prometheus Blackbox Exporter for endpoint probing.

1 CVE 23 MB · today
Observability pushgateway

Shell-less Prometheus Pushgateway for ephemeral and batch job metrics.

1 CVE 15 MB · today

Infrastructure

Infrastructure unbound

Shell-less Unbound validating recursive DNS resolver built from source via melange.

2 CVEs 23 MB · today
Infrastructure dnsmasq

Shell-less dnsmasq DNS forwarder/cache and DHCP server built on Wolfi.

Clean 7.6 MB · today
Infrastructure keepalived

Shell-less Keepalived VRRP failover and LVS load balancer built from source via melange.

2 CVEs 16 MB · today
Infrastructure step-ca

Shell-less step-ca online certificate authority built from source via melange.

1 CVE 47 MB · today
Infrastructure coredns

CoreDNS DNS server built from source via melange.

1 CVE 72 MB · today
Infrastructure etcd

etcd distributed key-value store built from source via melange.

2 CVEs 56 MB · today
Infrastructure openbao

OpenBao secret management server (Vault fork, MPL 2.0).

1 CVE 125 MB · today
Infrastructure keycloak

Keycloak identity and access management server.

29 CVEs 400 MB · today
Infrastructure qdrant

Qdrant vector search engine built from source via melange.

2 CVEs 88 MB · today
Infrastructure registry

Shell-less OCI distribution registry (Docker Registry v2).

1 CVE 52 MB · today
Infrastructure consul

Shell-less HashiCorp Consul (BUSL-1.1) built from source via melange.

1 CVE 126 MB · today

Kubernetes, CI & IaC

Kubernetes, CI & IaC external-dns

Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.

1 CVE 132 MB · today
Kubernetes, CI & IaC velero

Shell-less Velero Kubernetes backup and restore tool built from source via melange.

1 CVE 99 MB · today
Kubernetes, CI & IaC kaniko

Shell-less Kaniko container image builder (executor) built from source via melange.

11 CVEs 56 MB · today
Kubernetes, CI & IaC skopeo

Shell-less Skopeo container image inspection/copy tool built from source via melange.

1 CVE 25 MB · today
Kubernetes, CI & IaC helm

Shell-less Helm CLI built from source via melange.

1 CVE 56 MB · today
Kubernetes, CI & IaC kubectl

Shell-less kubectl CLI built from source via melange.

Clean 57 MB · today
Kubernetes, CI & IaC opentofu

Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.

2 CVEs 110 MB · today
Kubernetes, CI & IaC trivy

Shell-less Trivy vulnerability, IaC and secret scanner.

1 CVE 159 MB · today
Kubernetes, CI & IaC cosign

Shell-less Sigstore Cosign container signing & verification, built from source via melange.

1 CVE 97 MB · today
Kubernetes, CI & IaC syft

Shell-less Syft SBOM generator, built from source via melange.

1 CVE 82 MB · today
Kubernetes, CI & IaC grype

Shell-less Grype vulnerability scanner, built from source via melange.

6 CVEs 86 MB · today
Kubernetes, CI & IaC osv-scanner

Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.

1 CVE 55 MB · today
Kubernetes, CI & IaC oras

Shell-less ORAS OCI registry client, built from source via melange.

1 CVE 12 MB · today
Kubernetes, CI & IaC notation

Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.

1 CVE 9.2 MB · today
Kubernetes, CI & IaC conftest

Shell-less Conftest OPA config-policy testing CLI, built from source via melange.

1 CVE 70 MB · today
Kubernetes, CI & IaC kubeconform

Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.

Clean 9.5 MB · today
Kubernetes, CI & IaC kube-bench

Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.

Clean 54 MB · today
Kubernetes, CI & IaC trufflehog

Shell-less TruffleHog secret scanner, built from source via melange.

6 CVEs 119 MB · today
Kubernetes, CI & IaC flux

Shell-less Flux CD GitOps CLI, built from source via melange.

1 CVE 74 MB · today
Kubernetes, CI & IaC kustomize

Shell-less Kustomize Kubernetes configuration tool, built from source via melange.

Clean 16 MB · today
Kubernetes, CI & IaC sops

Shell-less SOPS secrets encryption tool, built from source via melange.

1 CVE 50 MB · today
Kubernetes, CI & IaC crane

Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.

Clean 12 MB · today
Kubernetes, CI & IaC kubeseal

Shell-less kubeseal Sealed Secrets CLI, built from source via melange.

1 CVE 36 MB · today
Kubernetes, CI & IaC helmfile

Shell-less Helmfile declarative Helm release manager, built from source via melange.

1 CVE 168 MB · today
Kubernetes, CI & IaC regctl

Shell-less regctl OCI registry client (regclient), built from source via melange.

Clean 12 MB · today
Kubernetes, CI & IaC stern

Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.

Clean 46 MB · today
Kubernetes, CI & IaC gitleaks

Shell-less Gitleaks secret scanner, built from source via melange.

2 CVEs 16 MB · today
Kubernetes, CI & IaC step-cli

Shell-less smallstep step PKI/certificate CLI, built from source via melange.

1 CVE 38 MB · today
Kubernetes, CI & IaC opa

Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.

1 CVE 39 MB · today

Apps

Apps jenkins

Shell-less Jenkins with jlink custom JRE, built from source via melange.

32 CVEs 392 MB · today
Apps gitea

Gitea git hosting built from source via melange.

3 CVEs 175 MB · today
Apps minio

Shell-less MinIO S3-compatible object storage built from source via melange.

1 CVE 107 MB · today
Apps rails

Ruby on Rails built from source via melange.

5 CVEs 117 MB · today
Apps mailpit

Shell-less Mailpit SMTP/email testing tool built from source via melange.

1 CVE 26 MB · today