Apache Airflow orchestration platform built from the ASF source distribution.
Hardened Kubernetes, CI & IaC container images
Cluster tooling, CI utilities and supply-chain scanners. Most are single static binaries, which makes them the smallest images in the catalog.
Argo CD GitOps controller for Kubernetes with its web UI, built from source via melange.
Argo CD repo-server with bundled git, Helm 4 and Kustomize, built from source via melange.
Shell-less Karpenter node autoscaler (AWS provider), built from source via melange.
Shell-less KEDA event-driven autoscaler operator, built from source via melange.
Shell-less BuildKit concurrent container image builder, built from source via melange.
Shell-less Conftest OPA config-policy testing CLI, built from source via melange.
Shell-less Sigstore Cosign container signing & verification, built from source via melange.
Shell-less crane OCI registry tool (go-containerregistry), built from source via melange.
Shell-less Kubernetes descheduler, built from source via melange.
Shell-less Dex OpenID Connect identity provider, built from source via melange.
Shell-less ExternalDNS Kubernetes DNS controller built from source via melange.
External Secrets Operator built from source via melange.
Flagger progressive delivery operator built from source.
Shell-less Flux CD GitOps CLI, built from source via melange.
Shell-less GitLab Runner CI/CD job executor, built from source via melange.
Shell-less Gitleaks secret scanner, built from source via melange.
Shell-less Grype vulnerability scanner, built from source via melange.
Harbor's portal UI and nginx reverse proxy, built from source via melange.
Shell-less Helm CLI built from source via melange.
Shell-less Helmfile declarative Helm release manager, built from source via melange.
Shell-less Kaniko container image builder (executor) built from source via melange.
Shell-less kube-bench CIS Kubernetes benchmark checker, built from source via melange.
Shell-less kube-vip control-plane VIP and load balancer, built from source via melange.
Shell-less Kubeconform Kubernetes manifest validator, built from source via melange.
Shell-less kubectl CLI built from source via melange.
Shell-less kubeseal Sealed Secrets CLI, built from source via melange.
Shell-less cmctl cert-manager CLI, built from source via melange.
Shell-less Sealed Secrets controller, built from source via melange.
Shell-less Argo Rollouts controller, built from source via melange.
Shell-less cert-manager trust-manager, built from source via melange.
Shell-less Prometheus Operator, built from source via melange.
Shell-less kube-rbac-proxy auth sidecar, built from source via melange.
Shell-less Kustomize Kubernetes configuration tool, built from source via melange.
Kyverno policy engine admission controller built from source.
Kubernetes metrics-server for kubectl top and HPA, built from source via melange.
Shell-less Notation OCI artifact signing/verification CLI, built from source via melange.
Shell-less Open Policy Agent (OPA) policy engine, built from source via melange.
Shell-less OpenTofu (Terraform-compatible IaC) built from source via melange.
Shell-less ORAS OCI registry client, built from source via melange.
Shell-less OSV-Scanner dependency vulnerability scanner, built from source via melange.
Shell-less regctl OCI registry client (regclient), built from source via melange.
Stakater Reloader configmap and secret reloader, from source.
Shell-less Skopeo container image inspection/copy tool built from source via melange.
Shell-less SOPS secrets encryption tool, built from source via melange.
Shell-less smallstep step PKI/certificate CLI, built from source via melange.
Shell-less Stern multi-pod Kubernetes log tailing tool, built from source via melange.
Shell-less Syft SBOM generator, built from source via melange.
Shell-less Trivy vulnerability, IaC and secret scanner.
Shell-less TruffleHog secret scanner, built from source via melange.
Shell-less Velero Kubernetes backup and restore tool built from source via melange.
Other categories
Every image here is checkable from your terminal — see how to verify — and compared against other hardened-image providers with published scan data on thecomparison pages.