← All 150 images

Hardened Kubernetes, CI & IaC container images

Cluster tooling, CI utilities and supply-chain scanners. Most are single static binaries, which makes them the smallest images in the catalog.

Kubernetes, CI & IaCairflow

Apache Airflow orchestration platform built from the ASF source distribution.

12 CVEs240 MB· 14 days ago
Kubernetes, CI & IaCargo-cd

Argo CD GitOps controller for Kubernetes with its web UI, built from source via melange.

173 CVEs211 MB· 14 days ago
Kubernetes, CI & IaCargo-cd-repo-server

Argo CD repo-server with bundled git, Helm 4 and Kustomize, built from source via melange.

697 CVEs380 MB· 14 days ago
Kubernetes, CI & IaCkarpenter

Shell-less Karpenter node autoscaler (AWS provider), built from source via melange.

—
Kubernetes, CI & IaCkeda

Shell-less KEDA event-driven autoscaler operator, built from source via melange.

—
Kubernetes, CI & IaCbuildkit

Shell-less BuildKit concurrent container image builder, built from source via melange.

2 CVEs94 MB· 14 days ago
Kubernetes, CI & IaCconftest

Shell-less Conftest OPA config-policy testing CLI, built from source via melange.

1 CVE71 MB· 14 days ago
Kubernetes, CI & IaCcosign

Shell-less Sigstore Cosign container signing & verification, built from source via melange.

2 CVEs96 MB· 14 days ago
Kubernetes, CI & IaCcrane

Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.

Clean12 MB· 14 days ago
Kubernetes, CI & IaCdescheduler

Shell-less Kubernetes descheduler, built from source via melange.

Clean86 MB· 14 days ago
Kubernetes, CI & IaCdex

Shell-less Dex OpenID Connect identity provider, built from source via melange.

1 CVE38 MB· 14 days ago
Kubernetes, CI & IaCexternal-dns

Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.

1 CVE155 MB· 14 days ago
Kubernetes, CI & IaCexternal-secrets

External Secrets Operator built from source via melange.

1 CVE89 MB· 14 days ago
Kubernetes, CI & IaCflagger

Flagger progressive delivery operator built from source.

1 CVE67 MB· 14 days ago
Kubernetes, CI & IaCflux

Shell-less Flux CD GitOps CLI, built from source via melange.

1 CVE72 MB· 14 days ago
Kubernetes, CI & IaCgitlab-runner

Shell-less GitLab Runner CI/CD job executor, built from source via melange.

1 CVE167 MB· 14 days ago
Kubernetes, CI & IaCgitleaks

Shell-less Gitleaks secret scanner, built from source via melange.

1 CVE16 MB· 14 days ago
Kubernetes, CI & IaCgrype

Shell-less Grype vulnerability scanner, built from source via melange.

5 CVEs85 MB· 14 days ago
Kubernetes, CI & IaCharbor-portal

Harbor's portal UI and nginx reverse proxy, built from source via melange.

—
Kubernetes, CI & IaChelm

Shell-less Helm CLI built from source via melange.

1 CVE63 MB· 14 days ago
Kubernetes, CI & IaChelmfile

Shell-less Helmfile declarative Helm release manager, built from source via melange.

1 CVE172 MB· 14 days ago
Kubernetes, CI & IaCkaniko

Shell-less Kaniko container image builder (executor) built from source via melange.

141 CVEs55 MB· 14 days ago
Kubernetes, CI & IaCkube-bench

Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.

Clean54 MB· 14 days ago
Kubernetes, CI & IaCkube-vip

Shell-less kube-vip control-plane VIP and load balancer, built from source via melange.

1 CVE61 MB· 14 days ago
Kubernetes, CI & IaCkubeconform

Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.

Clean10 MB· 14 days ago
Kubernetes, CI & IaCkubectl

Shell-less kubectl CLI built from source via melange.

Clean59 MB· 14 days ago
Kubernetes, CI & IaCkubeseal

Shell-less kubeseal Sealed Secrets CLI, built from source via melange.

1 CVE37 MB· 14 days ago
Kubernetes, CI & IaCcmctl

Shell-less cmctl cert-manager CLI, built from source via melange.

1 CVE67 MB· 14 days ago
Kubernetes, CI & IaCsealed-secrets

Shell-less Sealed Secrets controller, built from source via melange.

—
Kubernetes, CI & IaCargo-rollouts

Shell-less Argo Rollouts controller, built from source via melange.

—
Kubernetes, CI & IaCtrust-manager

Shell-less cert-manager trust-manager, built from source via melange.

—
Kubernetes, CI & IaCprometheus-operator

Shell-less Prometheus Operator, built from source via melange.

—
Kubernetes, CI & IaCkube-rbac-proxy

Shell-less kube-rbac-proxy auth sidecar, built from source via melange.

—
Kubernetes, CI & IaCkustomize

Shell-less Kustomize Kubernetes configuration tool, built from source via melange.

Clean13 MB· 14 days ago
Kubernetes, CI & IaCkyverno

Kyverno policy engine admission controller built from source.

2 CVEs132 MB· 14 days ago
Kubernetes, CI & IaCmetrics-server

Kubernetes metrics-server for kubectl top and HPA, built from source via melange.

Clean67 MB· 14 days ago
Kubernetes, CI & IaCnotation

Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.

1 CVE9.7 MB· 14 days ago
Kubernetes, CI & IaCopa

Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.

1 CVE41 MB· 14 days ago
Kubernetes, CI & IaCopentofu

Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.

1 CVE110 MB· 14 days ago
Kubernetes, CI & IaCoras

Shell-less ORAS OCI registry client, built from source via melange.

1 CVE12 MB· 14 days ago
Kubernetes, CI & IaCosv-scanner

Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.

Clean55 MB· 14 days ago
Kubernetes, CI & IaCregctl

Shell-less regctl OCI registry client (regclient), built from source via melange.

Clean13 MB· 14 days ago
Kubernetes, CI & IaCreloader

Stakater Reloader configmap and secret reloader, from source.

Clean49 MB· 14 days ago
Kubernetes, CI & IaCskopeo

Shell-less Skopeo container image inspection/copy tool built from source via melange.

2 CVEs25 MB· 14 days ago
Kubernetes, CI & IaCsops

Shell-less SOPS secrets encryption tool, built from source via melange.

1 CVE49 MB· 14 days ago
Kubernetes, CI & IaCstep-cli

Shell-less smallstep step PKI/certificate CLI, built from source via melange.

1 CVE38 MB· 14 days ago
Kubernetes, CI & IaCstern

Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.

Clean46 MB· 14 days ago
Kubernetes, CI & IaCsyft

Shell-less Syft SBOM generator, built from source via melange.

Clean82 MB· 14 days ago
Kubernetes, CI & IaCtrivy

Shell-less Trivy vulnerability, IaC and secret scanner.

1 CVE166 MB· 14 days ago
Kubernetes, CI & IaCtrufflehog

Shell-less TruffleHog secret scanner, built from source via melange.

6 CVEs119 MB· 14 days ago
Kubernetes, CI & IaCvelero

Shell-less Velero Kubernetes backup and restore tool built from source via melange.

1 CVE100 MB· 14 days ago

Other categories

Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on thecomparison pages.