Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.
Kubernetes, CI & IaC
Cluster tooling, CI utilities and supply-chain scanners. Most are single static binaries, which makes them the smallest images in the catalog.
Shell-less Velero Kubernetes backup and restore tool built from source via melange.
Shell-less Kaniko container image builder (executor) built from source via melange.
Shell-less Skopeo container image inspection/copy tool built from source via melange.
Shell-less Dex OpenID Connect identity provider, built from source via melange.
Shell-less Kubernetes descheduler, built from source via melange.
Shell-less kube-vip control-plane VIP and load balancer, built from source via melange.
Shell-less Helm CLI built from source via melange.
Shell-less kubectl CLI built from source via melange.
Kubernetes metrics-server for kubectl top and HPA, built from source via melange.
Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.
Shell-less Trivy vulnerability, IaC and secret scanner.
Shell-less Sigstore Cosign container signing & verification, built from source via melange.
Shell-less Syft SBOM generator, built from source via melange.
Shell-less Grype vulnerability scanner, built from source via melange.
Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.
Shell-less ORAS OCI registry client, built from source via melange.
Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.
Shell-less Conftest OPA config-policy testing CLI, built from source via melange.
Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.
Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.
Shell-less TruffleHog secret scanner, built from source via melange.
Shell-less Flux CD GitOps CLI, built from source via melange.
Shell-less Kustomize Kubernetes configuration tool, built from source via melange.
Shell-less SOPS secrets encryption tool, built from source via melange.
Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.
Shell-less kubeseal Sealed Secrets CLI, built from source via melange.
Shell-less Helmfile declarative Helm release manager, built from source via melange.
Shell-less regctl OCI registry client (regclient), built from source via melange.
Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.
Shell-less Gitleaks secret scanner, built from source via melange.
Shell-less smallstep step PKI/certificate CLI, built from source via melange.
Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.
Other categories
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on the comparison pages.