Images

66 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 66 available now.

0 CVE

DocumentDB

Self-contained MongoDB-compatible server (PostgreSQL + DocumentDB extension + wire gateway). Truly open.

image v0.112.0
Document standard MIT
0 CVE

Dragonfly

Multi-threaded Redis/Memcached-compatible datastore. Source-available (BSL) — prefer Valkey.

image v1.39.0
Cache low BUSL-1.1
0 CVE

Elasticsearch

Search and analytics engine. SSPL/Elastic license; OpenSearch is the OSI alternative.

image v9.4.2
Search low SSPL-1.0
0 CVE

etcd

Distributed, strongly consistent key-value store for coordination and config.

image v3.6.12
Coordination critical Apache-2.0
0 CVE

FerretDB

MongoDB-compatible document database built on PostgreSQL. The clean-license substitute for MongoDB.

image v2.7.0
Document standard Apache-2.0
0 CVE

fluent-bit

Hardened fluent-bit image, built from source on Wolfi.

image v5.0.7
Datastore standard Apache-2.0
0 CVE

garage

Lightweight S3-compatible object store (AGPL). A self-hosting-friendly alternative to SeaweedFS.

image v1.3.1
Object storage standard AGPL-3.0
0 CVE

gitea

Hardened gitea image, built from source on Wolfi.

image v1.26.2
Datastore standard MIT
0 CVE

grafana

Dashboards and visualization for metrics and logs. OSS edition (AGPL).

image v13.0.2
Observability standard AGPL-3.0
0 CVE

haproxy

Hardened haproxy image, built from source on Wolfi.

image v3.4.0
Datastore standard GPL-2.0+
0 CVE

harbor-core

Hardened harbor-core image, built from source on Wolfi.

image v2.14.4
Datastore standard Apache-2.0
0 CVE

harbor-exporter

Hardened harbor-exporter image, built from source on Wolfi.

image v2.14.4
Datastore standard Apache-2.0