← All 108 images

Kubernetes, CI & IaC

Cluster tooling, CI utilities and supply-chain scanners. Most are single static binaries, which makes them the smallest images in the catalog.

Kubernetes, CI & IaC external-dns

Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.

1 CVE 149 MB · today
Kubernetes, CI & IaC velero

Shell-less Velero Kubernetes backup and restore tool built from source via melange.

1 CVE 98 MB · today
Kubernetes, CI & IaC kaniko

Shell-less Kaniko container image builder (executor) built from source via melange.

115 CVEs 55 MB · today
Kubernetes, CI & IaC skopeo

Shell-less Skopeo container image inspection/copy tool built from source via melange.

1 CVE 25 MB · today
Kubernetes, CI & IaC dex

Shell-less Dex OpenID Connect identity provider, built from source via melange.

1 CVE 35 MB · today
Kubernetes, CI & IaC descheduler

Shell-less Kubernetes descheduler, built from source via melange.

Clean 78 MB · today
Kubernetes, CI & IaC kube-vip

Shell-less kube-vip control-plane VIP and load balancer, built from source via melange.

1 CVE 58 MB · today
Kubernetes, CI & IaC helm

Shell-less Helm CLI built from source via melange.

1 CVE 61 MB · today
Kubernetes, CI & IaC kubectl

Shell-less kubectl CLI built from source via melange.

Clean 59 MB · today
Kubernetes, CI & IaC metrics-server

Kubernetes metrics-server for kubectl top and HPA, built from source via melange.

Clean 66 MB · today
Kubernetes, CI & IaC opentofu

Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.

3 CVEs 108 MB · today
Kubernetes, CI & IaC trivy

Shell-less Trivy vulnerability, IaC and secret scanner.

1 CVE 161 MB · today
Kubernetes, CI & IaC cosign

Shell-less Sigstore Cosign container signing & verification, built from source via melange.

2 CVEs 95 MB · today
Kubernetes, CI & IaC syft

Shell-less Syft SBOM generator, built from source via melange.

Clean 82 MB · today
Kubernetes, CI & IaC grype

Shell-less Grype vulnerability scanner, built from source via melange.

5 CVEs 85 MB · today
Kubernetes, CI & IaC osv-scanner

Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.

Clean 55 MB · today
Kubernetes, CI & IaC oras

Shell-less ORAS OCI registry client, built from source via melange.

1 CVE 12 MB · today
Kubernetes, CI & IaC notation

Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.

1 CVE 9.7 MB · today
Kubernetes, CI & IaC conftest

Shell-less Conftest OPA config-policy testing CLI, built from source via melange.

1 CVE 69 MB · today
Kubernetes, CI & IaC kubeconform

Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.

Clean 10 MB · today
Kubernetes, CI & IaC kube-bench

Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.

Clean 54 MB · today
Kubernetes, CI & IaC trufflehog

Shell-less TruffleHog secret scanner, built from source via melange.

5 CVEs 120 MB · today
Kubernetes, CI & IaC flux

Shell-less Flux CD GitOps CLI, built from source via melange.

1 CVE 72 MB · today
Kubernetes, CI & IaC kustomize

Shell-less Kustomize Kubernetes configuration tool, built from source via melange.

Clean 16 MB · today
Kubernetes, CI & IaC sops

Shell-less SOPS secrets encryption tool, built from source via melange.

1 CVE 49 MB · today
Kubernetes, CI & IaC crane

Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.

Clean 12 MB · today
Kubernetes, CI & IaC kubeseal

Shell-less kubeseal Sealed Secrets CLI, built from source via melange.

1 CVE 36 MB · today
Kubernetes, CI & IaC helmfile

Shell-less Helmfile declarative Helm release manager, built from source via melange.

1 CVE 166 MB · today
Kubernetes, CI & IaC regctl

Shell-less regctl OCI registry client (regclient), built from source via melange.

Clean 13 MB · today
Kubernetes, CI & IaC stern

Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.

Clean 46 MB · today
Kubernetes, CI & IaC gitleaks

Shell-less Gitleaks secret scanner, built from source via melange.

1 CVE 16 MB · today
Kubernetes, CI & IaC step-cli

Shell-less smallstep step PKI/certificate CLI, built from source via melange.

1 CVE 37 MB · today
Kubernetes, CI & IaC opa

Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.

1 CVE 40 MB · today

Other categories

Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on the comparison pages.