Images

66 images

Hardened container images

Every image is built from source on Wolfi, scanned to zero fixable CVEs, cosign-signed, and pinned by digest, with an SPDX SBOM and a SLSA build-provenance attestation you can verify. Nonroot, read-only rootfs, amd64 + arm64. 66 available now.

0 CVE

MongoDB

Document database. SSPL is not OSI; prefer FerretDB or DocumentDB.

image v8.0.26
Document standard SSPL-1.0
0 CVE

MySQL

Widely used open-source relational database.

image v9.7.0
Relational critical GPL-2.0
0 CVE

NATS

Lightweight, high-performance messaging system.

image v2.14.2
Messaging standard Apache-2.0
0 CVE

Neo4j

Graph database for connected data. Community edition is GPLv3.

image v2026.05.0
Graph low GPL-3.0
0 CVE

nginx

High-performance web server and reverse proxy.

image v1.30.2
Gateway critical BSD-2-Clause
0 CVE

node-exporter

Hardened node-exporter image, built from source on Wolfi.

image v1.11.1
Datastore standard Apache-2.0
0 CVE

openbao

Hardened openbao image, built from source on Wolfi.

image v2.5.4
Datastore standard MPL-2.0
0 CVE

OpenSearch

Search and analytics suite. The Apache-licensed alternative to Elasticsearch.

image v3.7.0
Search standard Apache-2.0
0 CVE

otel-collector

Hardened otel-collector image, built from source on Wolfi.

image v0.154.0
Datastore standard Apache-2.0
0 CVE

pgbouncer

Hardened pgbouncer image, built from source on Wolfi.

image v1.25.2
Datastore standard ISC
0 CVE

PostgreSQL

Advanced open-source relational database with strong SQL and extensibility.

image v18.4
Relational critical PostgreSQL
0 CVE

PostgreSQL + DocumentDB

PostgreSQL 17 + DocumentDB extension — the FerretDB v2 storage backend.

image v0.107.0
Document standard MIT