All 162 hardened container images
-
Apache Airflow workflow orchestration platform.
83 MBtoday -
Prometheus Alertmanager handling alert dedup, grouping, silencing and routing.
None21 MBtoday -
Prometheus exporter for Apache httpd mod_status: workers, scoreboard, traffic and uptime.
None5.4 MBtoday -
Argo CD declarative GitOps continuous delivery for Kubernetes: the server, controller and notifications binary.
54 MBtoday -
Argo CD repo-server rendering manifests from git with bundled Helm and Kustomize.
111 MBtoday -
Argo Rollouts controller adding blue-green and canary deployments with automated analysis and promotion on Kubernetes.
None27 MBtoday -
AWS CLI v2 command-line client for managing Amazon Web Services from scripts and CI.
53 MBtoday -
Prometheus Blackbox Exporter probing endpoints over HTTP, TCP, DNS and ICMP.
None9.2 MBtoday -
BuildKit concurrent container image builder, buildkitd plus buildctl.
None35 MBtoday -
Bun, the fast all-in-one JavaScript runtime and bundler.
Not scanned—— -
Caddy web server with automatic HTTPS and Let's Encrypt certificates.
20 MBtoday -
cAdvisor (Container Advisor) exporting per-container CPU, memory, filesystem and network usage as Prometheus metrics.
None10 MBtoday -
Apache Cassandra distributed wide-column database for high-write workloads.
120 MBtoday -
ChartMuseum: Helm chart repository server with local, S3, GCS and Azure storage backends and an upload API.
24 MBtoday -
CloudNativePG operator running highly available PostgreSQL clusters on Kubernetes with failover, backups and rolling updates.
None37 MBtoday -
Kubernetes Cluster Autoscaler resizing node groups on AWS, GCP, Azure and more.
52 MBtoday -
cmctl is the cert-manager CLI: approve CertificateRequests, renew certs, check issuer health.
None22 MBtoday -
configmap-reload sidecar that fires a webhook when a mounted ConfigMap or Secret changes.
None4.7 MBtoday -
Conftest testing configuration files against Rego policies with Open Policy Agent.
None23 MBtoday -
HashiCorp Consul service discovery, health checking and service mesh.
39 MBtoday -
Contour, the CNCF Envoy-based Kubernetes ingress controller with HTTPProxy routing.
None19 MBtoday -
CoreDNS pluggable DNS server and the default Kubernetes cluster resolver.
Not scanned—— -
Sigstore Cosign for signing and verifying container images and OCI artifacts.
31 MBtoday -
Apache CouchDB document-oriented database with a native HTTP/JSON API and multi-master replication.
69 MBtoday -
crane inspecting, copying and mutating images in OCI registries via go-containerregistry.
None5.2 MBtoday -
Deno, the secure TypeScript and JavaScript runtime with sandboxed permissions.
None53 MBtoday -
Kubernetes descheduler evicting pods to rebalance nodes against your policies.
None23 MBtoday -
Dex OpenID Connect identity provider federating LDAP, SAML and GitHub logins.
None15 MBtoday -
dnsmasq lightweight DNS forwarder, cache and DHCP server for small networks.
3.6 MBtoday -
.NET runtime for running compiled C# and F# services.
65 MBtoday -
Prometheus exporter for Elasticsearch and OpenSearch cluster, node and index health metrics.
None6.8 MBtoday -
Envoy L7 proxy and service-mesh data plane with gRPC and observability built in.
None42 MBtoday -
Erlang/OTP runtime for concurrent, fault-tolerant applications, built from source (not Wolfi's package).
None53 MBtoday -
etcd distributed key-value store backing Kubernetes control planes.
None22 MBtoday -
ExternalDNS controller syncing Kubernetes Services and Ingresses to your DNS provider.
None38 MBtoday -
External Secrets Operator syncs secrets from AWS, Vault, GCP and Azure into Kubernetes.
None27 MBtoday -
Flagger automates canary, A/B and blue-green rollouts for Kubernetes using service mesh metrics.
None20 MBtoday -
Apache Flink stateful stream processing engine for real-time pipelines.
328 MBtoday -
Fluent Bit lightweight log and metrics processor and forwarder for edge and Kubernetes.
None48 MBtoday -
Flux CD GitOps CLI for bootstrapping and reconciling Kubernetes from git.
None26 MBtoday -
Gitea lightweight self-hosted git service with issues, CI and a package registry.
75 MBtoday -
GitLab Runner executes CI/CD jobs from your GitLab pipelines on your own infrastructure.
None60 MBtoday -
Gitleaks detecting hardcoded secrets and credentials in git repositories.
7.0 MBtoday -
Go toolchain image for compiling Go services in CI and multi-stage builds.
261 MBtoday -
Grype scanning container images and filesystems for known vulnerabilities.
31 MBtoday -
HAProxy TCP and HTTP load balancer for high-traffic sites.
Not scanned—— -
Harbor portal: the Angular UI and nginx reverse proxy fronting the Harbor container registry.
Not scanned—— -
Headscale is a self-hosted open source implementation of the Tailscale control server.
20 MBtoday -
Helm CLI for templating, installing and upgrading Kubernetes chart releases.
None21 MBtoday -
Helmfile declaratively managing many Helm releases across environments.
None50 MBtoday -
Apache HTTP Server for static sites, reverse proxying and mod_* workloads.
29 MBtoday -
Jaeger distributed tracing backend for collecting, storing and querying spans.
None26 MBtoday -
OpenJDK 21 JRE for running JVM services.
89 MBtoday -
Jenkins automation server for CI/CD pipelines.
165 MBtoday -
Prometheus JMX Exporter turning Java MBeans into metrics, standalone server plus javaagent jar.
115 MBtoday -
Apache Kafka event streaming platform in KRaft mode, no ZooKeeper required.
176 MBtoday -
Kaniko executor for building container images inside Kubernetes without a Docker daemon.
Not scanned—— -
Karpenter controller provisioning right-sized Kubernetes nodes on AWS from pending pod demand.
None17 MBtoday -
KEDA operator scaling Kubernetes workloads on external event metrics from queues, streams and databases.
None50 MBtoday -
Keepalived VRRP failover and LVS load balancing for high-availability clusters.
None11 MBtoday -
Keycloak identity and access management with OIDC, SAML and social login.
250 MBtoday -
Kong API Gateway built on Nginx and OpenResty, compiled from source against maintained OpenSSL.
81 MBtoday -
kube-bench checking Kubernetes clusters against the CIS Kubernetes Benchmark.
None17 MBtoday -
kube-rbac-proxy: sidecar that guards a metrics or API endpoint with Kubernetes TokenReview and SubjectAccessReview.
None17 MBtoday -
kube-state-metrics exposing Prometheus metrics about Kubernetes object state.
None19 MBtoday -
kube-vip providing a control-plane virtual IP and service load balancer for Kubernetes.
Not scanned—— -
Kubeconform validating Kubernetes manifests against the schema fast and offline.
None4.4 MBtoday -
kubectl command-line client for managing Kubernetes clusters.
None19 MBtoday -
kubeseal encrypting Kubernetes Secrets into SealedSecrets safe to commit to git.
None12 MBtoday -
Kustomize building Kubernetes manifests with overlays and patches, no templating.
None5.2 MBtoday -
Kvrocks is a Redis-protocol store backed by RocksDB, for datasets larger than RAM.
None19 MBtoday -
Kyverno Kubernetes-native policy engine validating, mutating and generating resources with no new language.
41 MBtoday -
Grafana Loki log aggregation indexing labels instead of full text.
None46 MBtoday -
Mailpit SMTP testing server capturing outbound mail with a web UI and API.
None11 MBtoday -
MariaDB LTS relational database, a drop-in MySQL alternative.
None32 MBtoday -
Meilisearch fast, developer-friendly search engine with typo tolerance and REST APIs.
None113 MBtoday -
Memcached distributed memory object caching system.
None10 MBtoday -
Prometheus memcached_exporter publishing Memcached hit ratios, evictions, connections and slab stats on :9150.
None5.3 MBtoday -
MetalLB provides LoadBalancer services for bare-metal Kubernetes clusters via ARP and BGP.
None39 MBtoday -
Kubernetes metrics-server supplying resource metrics for kubectl top and HPA.
None21 MBtoday -
Grafana Mimir horizontally scalable long-term Prometheus storage.
64 MBtoday -
MinIO high-performance S3-compatible object storage.
None39 MBtoday -
Percona MongoDB Exporter exposing replica-set, sharding and server metrics to Prometheus.
None13 MBtoday -
Eclipse Mosquitto MQTT broker for IoT and device messaging.
Not scanned—— -
MySQL LTS relational database server.
None65 MBtoday -
Prometheus MySQL Server Exporter for MySQL and MariaDB metrics.
None5.6 MBtoday -
NATS server for high-throughput cloud-native messaging and JetStream persistence.
None7.1 MBtoday -
Neo4j Community Edition graph database with Cypher query support, built from the official binary release.
319 MBtoday -
Nginx web server, reverse proxy and load balancer on the mainline branch.
11 MBtoday -
NGINX Prometheus exporter turning stub_status or NGINX Plus API stats into Prometheus metrics on :9113.
None5.5 MBtoday -
Prometheus Node Exporter publishing hardware and OS metrics from Linux hosts.
None6.8 MBtoday -
Node.js JavaScript runtime for server-side apps and APIs.
62 MBtoday -
Notation CLI signing and verifying OCI artifacts under the Notary Project spec.
None4.2 MBtoday -
NSQ realtime distributed messaging: nsqd, nsqlookupd and nsqadmin in one shell-less non-root image.
None30 MBtoday -
OAuth2 Proxy adding OIDC and OAuth2 authentication in front of any upstream app.
None11 MBtoday -
Open Policy Agent evaluating Rego policies for admission control and authorization.
None14 MBtoday -
OpenBao secrets management and encryption service, the MPL-2.0 Vault fork.
37 MBtoday -
OpenLDAP slapd directory server with MDB backend, common overlays and LDAP clients.
13 MBtoday -
OpenSearch 3.x search and analytics engine on OpenJDK 21.
243 MBtoday -
OpenTofu Terraform-compatible infrastructure-as-code CLI under MPL 2.0.
None35 MBtoday -
ORAS CLI for pushing and pulling arbitrary artifacts to OCI registries.
None5.2 MBtoday -
OSV-Scanner matching project dependencies against the OSV vulnerability database.
None21 MBtoday -
OpenTelemetry Collector receiving, processing and exporting traces, metrics and logs.
None13 MBtoday -
Patroni supervisor for PostgreSQL high availability with automatic failover.
Not scanned—— -
Perl interpreter for scripting, text processing, and CPAN modules, built from source (not Wolfi's package).
19 MBtoday -
PgBouncer lightweight connection pooler for PostgreSQL.
None10 MBtoday -
Pgpool-II connection pooler, load balancer and failover manager for PostgreSQL.
None14 MBtoday -
PHP runtime for web applications and CLI scripts.
None28 MBtoday -
phpMyAdmin web administration for MySQL and MariaDB on PHP-FPM.
37 MBtoday -
PostgreSQL relational database server, slimmed to the runtime essentials.
133 MBtoday -
Prometheus exporter for PostgreSQL server metrics, pairing with postgres-slim and prometheus.
None5.9 MBtoday -
Prometheus monitoring server scraping and storing time-series metrics with PromQL.
None57 MBtoday -
Prometheus Operator managing Prometheus, Alertmanager and ServiceMonitor CRDs on Kubernetes.
None22 MBtoday -
Apache Pulsar distributed messaging and event streaming with tiered storage.
262 MBtoday -
Prometheus Pushgateway accepting metrics from ephemeral and batch jobs.
None7.3 MBtoday -
CPython 3 runtime for running Python services in production.
30 MBtoday -
Qdrant vector search engine for embeddings, semantic search and RAG.
None43 MBtoday -
RabbitMQ message broker speaking AMQP, MQTT and STOMP.
None134 MBtoday -
Ruby on Rails application runtime with the gems and native extensions preinstalled.
58 MBtoday -
rclone syncing files across 70+ object stores and cloud drives.
None30 MBtoday -
Redis in-memory data store for caching, queues and pub/sub.
14 MBtoday -
Redis Exporter publishing Redis and Valkey instance metrics to Prometheus.
None4.4 MBtoday -
regctl querying and managing OCI registries and image manifests via regclient.
None5.3 MBtoday -
OCI distribution registry (Docker Registry v2) for hosting container images.
None17 MBtoday -
Reloader watches ConfigMaps and Secrets and rolls the Deployments that mount them.
None15 MBtoday -
restic fast, deduplicating, encrypted backup program for servers and volumes.
None14 MBtoday -
Ruby interpreter for running Rack, Sinatra and Rails workloads.
None43 MBtoday -
Sealed Secrets controller decrypting SealedSecret resources into Kubernetes Secrets in-cluster; server half of our kubeseal image.
None16 MBtoday -
SeaweedFS distributed object store and filesystem for billions of small files.
None49 MBtoday -
Skopeo for inspecting, copying and signing container images between registries.
None11 MBtoday -
Apache Solr enterprise search platform built on Lucene.
310 MBtoday -
SOPS encrypting secrets in YAML, JSON and env files with KMS, age and PGP.
None17 MBtoday -
SQLite embedded SQL database engine and CLI shell.
7.6 MBtoday -
step-ca online certificate authority issuing short-lived X.509 and SSH certificates.
16 MBtoday -
smallstep step CLI for PKI, certificate issuance, JWTs and OAuth flows.
14 MBtoday -
Stern tailing logs from multiple Kubernetes pods and containers at once.
None15 MBtoday -
Syft generating SBOMs in SPDX and CycloneDX from images and filesystems.
Not scanned—— -
Continuous peer-to-peer file synchronisation between your own devices, no cloud account.
None15 MBtoday -
Tailscale WireGuard mesh VPN with the tailscaled daemon and CLI.
None21 MBtoday -
Telegraf plugin-driven agent collecting metrics from systems, containers and APIs.
89 MBtoday -
Grafana Tempo distributed tracing backend storing traces in object storage.
38 MBtoday -
Temporal admin toolbox: tdbg, schema tools for Cassandra, SQL and Elasticsearch, plus the temporal and tctl CLIs.
121 MBtoday -
Temporal workflow engine server with the temporal and tctl CLIs bundled, as upstream ships them.
93 MBtoday -
Temporal Web UI server with the SvelteKit bundle embedded in the binary.
10 MBtoday -
Thanos adding HA, global query and unlimited retention to Prometheus via object storage.
30 MBtoday -
TimescaleDB time-series extension for Postgres, built Apache-2.0-only from source.
None140 MBtoday -
Apache Tomcat servlet container with the default webapps removed.
57 MBtoday -
Traefik cloud-native reverse proxy with automatic service discovery and TLS.
None50 MBtoday -
Trivy scanner for vulnerabilities, misconfiguration, secrets and licences.
None53 MBtoday -
TruffleHog finding and verifying leaked credentials across git history and files.
39 MBtoday -
trust-manager from the cert-manager project, distributing CA trust bundles to ConfigMaps and Secrets across namespaces.
None12 MBtoday -
Unbound validating, recursive, caching DNS resolver with DNSSEC.
None14 MBtoday -
Valkey in-memory data store, the BSD-licensed Redis fork.
None14 MBtoday -
Vaultwarden lightweight Bitwarden-compatible password manager server.
Not scanned—— -
Vector high-performance observability pipeline for logs, metrics and traces.
None65 MBtoday -
Velero backup, restore and migration for Kubernetes clusters and persistent volumes.
None31 MBtoday -
VictoriaLogs is a fast, resource-efficient log database from the VictoriaMetrics team.
Not scanned—— -
VictoriaMetrics fast time-series database and Prometheus long-term storage.
None7.5 MBtoday -
WordPress publishing platform served over PHP-FPM.
None64 MBtoday -
Zipkin distributed tracing server for latency analysis across microservices.
169 MBtoday -
Apache ZooKeeper coordination service for distributed configuration and leader election.
51 MBtoday -
Minimal OCI-native container registry (zot) implementing the OCI distribution spec, with the zli client.
None30 MBtoday
No images match your filters.