Image Catalog
Hardened, minimal container images — continuously rebuilt from upstream, vulnerability-scanned, cosign-signed, and available with FIPS 140-3 enabled variants.
616 images15714 tags3442 FIPS tags474 signed
260 results
Featured3
caddy
Fast, multi-purpose web server with automatic HTTPS
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Web servers
No tagsView →
redis
Redis is the world's fastest data platform for caching, vector search, and NoSQL databases.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
24 MB
16 tags · 3d agoView →
traefik
Traefik, The Cloud Native Edge Router
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
43 MB
9 tags · 3d agoView →
API management5
envoy rate limit service
Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized
rate limiting for Envoy and other proxies.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- API management
8 MB
12 tags · 3d agoView →
external secrets operator
External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- API management
56 MB
15 tags · 3d agoView →
harbor registry
Docker Distribution registry for storing and distributing container images within Harbor
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- API management
No tagsView →
cilium hubble proto
Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- API management
16 MB
8 tags · 3d agoView →
hubble ui backend
Backend API server for Cilium Hubble UI
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- API management
20 MB
4 tags · 3d agoView →
Databases & storage41
cdi api server
CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
13 MB
9 tags · 3d agoView →
cdi operator
CDI Operator deploys and manages the Containerized Data Importer infrastructure components in Kubernetes
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Databases & storage
No tagsView →
cdi upload proxy
CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
13 MB
8 tags · 3d agoView →
ceph csi operator
Ceph CSI Operator is a Kubernetes operator that deploys and manages the Ceph CSI drivers for RBD, CephFS, NFS, and NVMe-oF storage workloads.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
15 MB
5 tags · 3d agoView →
cloudnativepg
CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
cloudnativepg ba plugin
CloudnativePG Barman Cloud Plugin is a plugin for CloudnativePG for backing up and restoring Kubernetes Postgres clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
16 MB
5 tags · 2d agoView →
csi-addons sidecar
csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
24 MB
7 tags · 3d agoView →
csi attacher
csi-attacher is a Kubernetes CSI sidecar component that manages volume attachment and detachment operations by watching VolumeAttachment objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
17 MB
10 tags · 2d agoView →
csi external health monitor controller
csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
16 MB
7 tags · 3d agoView →
csi hostpath plugin
csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
6 MB
6 tags · 3d agoView →
csi provisioner
csi-provisioner is a Kubernetes CSI sidecar component that manages dynamic volume provisioning by watching PersistentVolumeClaim objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
17 MB
9 tags · 2d agoView →
csi resizer
csi-resizer is a Kubernetes CSI sidecar component that handles online volume expansion by watching PersistentVolumeClaim objects and coordinating with CSI drivers.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Databases & storage
No tagsView →
csi snapshotter
csi-snapshotter is a Kubernetes CSI sidecar component that manages volume snapshots and restore operations by watching VolumeSnapshot objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
17 MB
4 tags · 2d agoView →
eck operator
Elastic Cloud on Kubernetes operator for Elasticsearch, Kibana, APM, and more.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
19 MB
13 tags · 3d agoView →
hyperledger fabric peer
Peer node service for Hyperledger Fabric blockchain networks
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
kafka exporter
A Prometheus exporter for Kafka metrics
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
kube-state-metrics
an add-on agent to generate and expose cluster-level metrics
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
16 MB
5 tags · 3d agoView →
linstor affinity controller
Keeps Kubernetes PersistentVolume affinity in sync with LINSTOR volume placement for optimal workload scheduling.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
14 MB
5 tags · 3d agoView →
csi livenessprobe
livenessprobe is a Kubernetes CSI sidecar component that provides health checking capabilities for CSI drivers by monitoring driver endpoints and reporting liveness/readiness status to Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
7 MB
3 tags · 3d agoView →
local path provisioner
Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
13 MB
3 tags · 3d agoView →
memcached
Free & open source, high-performance, distributed memory object caching system.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
mongo
Secure your stack with a hardened Mongo image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
348 MB
6 tags · 2d agoView →
mongo-hardened
Secure your stack with a Mongo-Hardened image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
348 MB
6 tags · 2d agoView →
mongodb exporter
A Prometheus exporter for MongoDB metrics
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
11 MB
7 tags · 3d agoView →
mongodb controllers for kubernetes (mck)
A Kubernetes operator that enables users to run MongoDB in Kubernetes
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
18 MB
4 tags · 2d agoView →
mysql server exporter
A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Databases & storage
No tagsView →
object storage sidecar
Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
13 MB
3 tags · 2d agoView →
openbao
OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
33 MB
3 tags · 3d agoView →
postgres-hardened
Secure your stack with a Postgres-Hardened image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
148 MB
3 tags · 2d agoView →
prometheus
Prometheus is a systems and service monitoring system that records metrics in a time series database.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
56 MB
16 tags · 2d agoView →
redis
Redis is the world's fastest data platform for caching, vector search, and NoSQL databases.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
24 MB
16 tags · 3d agoView →
snapshot controller
Kubernetes controller that watches VolumeSnapshot and VolumeSnapshotContent objects
and coordinates snapshot operations with CSI drivers.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Databases & storage
No tagsView →
spicedb operator
SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
18 MB
13 tags · 2d agoView →
thanos
Thanos is a highly available metrics system that offers long term storage capabilities.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
27 MB
13 tags · 2d agoView →
velero
Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
40 MB
4 tags · 3d agoView →
velero plugin for aws
Plugin to support running Velero on AWS.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
velero plugin for gcp
Plugin to support running Velero on GCP.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
19 MB
4 tags · 3d agoView →
versitygw
VersityGW is a high-performance S3 translation service.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Databases & storage
No tagsView →
victoriametrics vminsert
VictoriaMetrics VMInsert is the ingestion component for a VictoriaMetrics cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
5 MB
3 tags · 3d agoView →
victoriametrics vmselect
VictoriaMetrics VMSelect is the query component for a VictoriaMetrics cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
6 MB
3 tags · 3d agoView →
victoriametrics vmstorage
VictoriaMetrics VMStorage is the ingestion component for a VictoriaMetrics cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
5 MB
2 tags · 3d agoView →
Developer tools47
alpine base
A secure, ultra-minimal Alpine Linux base image with essential system utilities for building lightweight containerized applications.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Developer tools
No tagsView →
amazon-corretto-jdk
Secure your stack with a hardened Amazon-Corretto-JDK image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
539 MB
2 tags · 4d agoView →
azure service operator
Azure Service Operator allows you to create Azure resources using kubectl.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
prometheus blackbox exporter
Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
8 MB
15 tags · 2d agoView →
buildkite mcp server
The official Buildkite MCP Server connects AI tools to the Buildkite API, giving AI agents, assistants, and chatbots access to pipelines, builds, jobs, and test runs through the Model Context Protocol.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
14 MB
11 tags · 2d agoView →
cert-manager-startupapicheck
A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
12 MB
17 tags · 2d agoView →
chartmuseum
An open-source Helm Chart Repository server with support for cloud and local storage backends.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
20 MB
12 tags · 2d agoView →
cilium certgen
A convenience tool to generate and store certificates for Cilium components, such as Cluster Mesh and Hubble Relay.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
11 MB
9 tags · 2d agoView →
kubernetes cloud controller manager (cloud-controller-manager)
Runs cloud-provider-specific control loops in the Kubernetes control plane.
cloud-controller-manager embeds the cloud-specific control loops that integrate
a Kubernetes cluster with the underlying cloud provider's APIs.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
18 MB
18 tags · 2d agoView →
configmap-reload
A simple binary to trigger a reload when Kubernetes ConfigMaps or Secrets are updated. It watches mounted volume dirs and notifies the target process that the config map has been changed.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
10 tags · 2d agoView →
cosign
Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
25 MB
17 tags · 2d agoView →
crane
Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
16 tags · 3d agoView →
csi node driver registrar
Sidecar container that registers a CSI driver with the kubelet using the kubelet plugin registration mechanism.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
7 MB
6 tags · 2d agoView →
curl
command line tool and library for transferring data with URLs
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
5 MB
11 tags · 3d agoView →
delve
Delve is a debugger for the Go programming language.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
6 MB
15 tags · 2d agoView →
externaldns
ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
flux cli
Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration and automating updates to configuration when there is new code to deploy.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
22 MB
14 tags · 2d agoView →
actions runner controller
Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
49 MB
6 tags · 3d agoView →
github mcp server
GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
7 MB
16 tags · 2d agoView →
go
Secure your stack with a hardened Go image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
322 MB
2 tags · 4d agoView →
jsonnet
A configuration language for app and tool developers. A simple extension of JSON. Eliminate duplication with object-orientation.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
8 tags · 2d agoView →
goldilocks
A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
grafana mcp server
A Model Context Protocol server for Grafana that provides AI agents with access to Grafana dashboards, datasources, alerting, incidents, and observability features. Enables LLMs to query metrics, logs, traces, and manage Grafana resources.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Developer tools
No tagsView →
helm
Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
22 MB
15 tags · 2d agoView →
http echo
A lightweight Go web server that serves provided content as an HTML page, ideal for demos and testing.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
k6
Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
16 MB
16 tags · 3d agoView →
k6-operator
An operator for running distributed k6 tests.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
13 MB
4 tags · 3d agoView →
k8ssandra-client
kubectl plugin for managing K8ssandra clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
60 MB
15 tags · 2d agoView →
kubernetes api server (kube-apiserver)
Front end for the Kubernetes control plane.
kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation,
authentication and authorization, runs admission control, and persists cluster state
to an etcd backend.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
26 MB
17 tags · 2d agoView →
kubernetes controller manager (kube-controller-manager)
Runs core control loops in the Kubernetes control plane.
kube-controller-manager runs controller processes that regulate the state of the
cluster and perform routine tasks.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
23 MB
18 tags · 2d agoView →
kubernetes scheduler (kube-scheduler)
Schedules pods onto nodes.
kube-scheduler watches for newly created pods with no assigned node, and selects
a node for them to run on.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
18 MB
18 tags · 2d agoView →
kube webhook certgen
Certificate generator and patcher for Kubernetes admission webhooks.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
8 MB
16 tags · 3d agoView →
kubectl
Kubernetes provides a command line tool for communicating with a Kubernetes cluster's control plane, using the Kubernetes API.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
kubernetes autoscaler addon resizer
A container that watches over another container in a deployment and vertically scales the dependent container up and down based on the number of nodes in the cluster.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
localstack
LocalStack is a cloud software development framework to develop and test your AWS applications locally.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Developer tools
No tagsView →
grafana loki helm test
A collection of go tests that test if a Loki canary is running correctly.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Developer tools
No tagsView →
nats cli
A command line utility to interact with and manage NATS.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
9 MB
7 tags · 3d agoView →
openmetadata
OpenMetadata is an open platform for data discovery, observability, and governance.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
417 MB
15 tags · 2d agoView →
opentelemetry go autoinstrumentation
This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
16 MB
3 tags · 3d agoView →
opentelemetry collector
OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives,
processes, and exports traces, metrics and logs. It is used as a standalone
gateway or as an agent to centralize telemetry collection and forward data to
backends such as Prometheus, Tempo, Jaeger, or commercial APMs.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
32 MB
13 tags · 2d agoView →
regctl
regctl is a CLI interface for Docker and OCI registries. It provides efficient registry operations without requiring a container runtime, supporting multi-platform images, OCI artifacts, and content manipulation.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
docker scout cli
Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
55 MB
8 tags · 2d agoView →
docker scout sbom indexer
A specialized tool for generating Software Bill of Materials (SBOM) by scanning file systems and indexing packages for Docker Scout and BuildKit integration.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
47 MB
3 tags · 3d agoView →
shellcheck
ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls
0 CVEsSigned
- OS
- —
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
9 MB
1 tag · 1mo agoView →
tempo query
A minimal Grafana Tempo Query (Jaeger storage plugin) image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
7 MB
16 tags · 3d agoView →
wbitt network multitool
A multi-arch multitool for container and network testing and troubleshooting. Includes a
comprehensive set of networking utilities and a minimal nginx web server for easy
access and testing. The -extra flavor includes additional tools for advanced networking,
database connectivity, and security testing.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Developer tools
No tagsView →
zot
Zot is a production-ready, vendor-neutral OCI image registry with full OCI standards compliance and scalability.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
49 MB
8 tags · 3d agoView →
Integration & delivery36
argo workflow controller
Argo Workflow Controller is a Kubernetes-native workflow engine supporting DAG and step-based workflows.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
41 MB
15 tags · 2d agoView →
aws eks pod identity agent
The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
6 MB
16 tags · 3d agoView →
aws load balancer controller
The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
20 MB
17 tags · 3d agoView →
aws node termination handler
Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
16 MB
12 tags · 3d agoView →
aws private ca issuer
AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
10 MB
9 tags · 2d agoView →
azure key vault controller
Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
cert manager controller
Controller component for cert-manager
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
20 MB
17 tags · 2d agoView →
cert-manager-istio-csr
Certificate signing request agent for integrating cert-manager with Istio
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
23 MB
10 tags · 2d agoView →
dapr-daprd
Dapr runtime sidecar that provides building blocks for distributed applications
including service invocation, state management, pub/sub, and observability.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
55 MB
6 tags · 2d agoView →
dapr injector
Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
5 tags · 2d agoView →
dapr operator
Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
dapr placement service
Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
13 MB
11 tags · 2d agoView →
dapr scheduler
A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
17 MB
7 tags · 2d agoView →
dapr sentry
Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
5 tags · 2d agoView →
distribution registry
The toolkit to pack, ship, store, and deliver container content
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
helm controller
Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
22 MB
10 tags · 2d agoView →
image automation controller
Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
18 MB
6 tags · 3d agoView →
image reflector controller
Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
17 MB
6 tags · 3d agoView →
notification controller
Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
21 MB
15 tags · 3d agoView →
source controller
Flux CD component that acquires artifacts from external sources such as Git repositories, Helm repositories, and OCI registries, making them available to other Flux controllers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
28 MB
17 tags · 2d agoView →
source watcher
Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
9 tags · 2d agoView →
gatekeeper
Policy Controller for Kubernetes, built on Open Policy Agent.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
gitlab shell
GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
75 MB
15 tags · 2d agoView →
istio install cni
Istio CNI installer image and daemonset for Kubernetes environments
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
39 MB
13 tags · 2d agoView →
karpenter
karpenter is an efficient node manager for kubernetes clusters
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
keda
KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
40 MB
12 tags · 2d agoView →
kubernetes cluster autoscaler
Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
37 MB
12 tags · 2d agoView →
notation
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
4 MB
16 tags · 2d agoView →
placement
A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
open cluster management registration
Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Integration & delivery
No tagsView →
virt api
Virt API provides the Kubernetes API extension for managing virtual machines in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
19 MB
8 tags · 2d agoView →
virt controller
Virt Controller manages the lifecycle of virtual machines in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
17 MB
5 tags · 3d agoView →
virt export proxy
Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
15 MB
6 tags · 3d agoView →
vertical pod autoscaler admission controller
Admission webhook controller for Kubernetes Vertical Pod Autoscaler that sets resource requests on new pods.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Integration & delivery
No tagsView →
vertical pod autoscaler recommender
Monitors current and past resource usage and provides recommendations for the CPU and memory request values the container should use.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
9 MB
1 tag · 3d agoView →
vertical pod autoscaler updater
Monitors the VPA resources and compares current Pod resource requests with the recommendations, evicting and updating pod resources accordingly.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
9 MB
1 tag · 3d agoView →
Languages & frameworks1
Machine learning & AI2
kserve agent
KServe Agent is a component that manages model serving workloads in KServe.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Machine learning & AI
22 MB
6 tags · 2d agoView →
tensorflow serving
A flexible, high-performance serving system for machine learning models designed for production environments
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Machine learning & AI
136 MB
11 tags · 2d agoView →
Message queues1
Monitoring & observability43
access log exporter
A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
15 tags · 2d agoView →
azure metrics exporter
Azure Monitor metrics exporter for Prometheus
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
beat exporter
Prometheus exporter for Elastic Beats stats endpoints.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
4 MB
12 tags · 3d agoView →
grafana beyla
Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
36 MB
15 tags · 2d agoView →
cert exporter
A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
clickhouse metrics exporter
Altinity's official Prometheus metrics exporter that automatically discovers and monitors ClickHouse clusters managed by the ClickHouse Operator, providing comprehensive operational metrics through a standard `/metrics` endpoint for Prometheus scraping.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
8 tags · 3d agoView →
clickhouse operator
Altinity's Kubernetes operator for managing ClickHouse clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
14 MB
7 tags · 3d agoView →
datadog operator
The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
descheduler
Kubernetes descheduler that evicts pods to improve workload placement.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
19 MB
7 tags · 3d agoView →
filebeat
Filebeat sends log files to Logstash or directly to Elasticsearch
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
47 MB
16 tags · 2d agoView →
grafana operator
A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
16 MB
7 tags · 2d agoView →
grafana rollout operator
A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
harbor exporter
Harbor Exporter exposes Harbor registry metrics for scraping by Prometheus.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
9 MB
13 tags · 2d agoView →
cilium hubble relay
Relay server for aggregating and exposing Hubble observability data
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Monitoring & observability
No tagsView →
istio pilot
Istio control plane component that configures proxies and handles service discovery
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
istioctl
Istioctl image for managing Istio deployments
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
24 MB
8 tags · 2d agoView →
jaeger ingester
Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
22 MB
7 tags · 3d agoView →
jaeger query
Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
23 MB
7 tags · 3d agoView →
karma
Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
7 MB
9 tags · 3d agoView →
grafana loki canary
Loki Canary - Test tool for Grafana Loki installations
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
16 tags · 3d agoView →
prometheus memcached exporter
Exports memcached server metrics for scraping by Prometheus.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
5 tags · 3d agoView →
metrics server
Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
18 MB
10 tags · 3d agoView →
nats server config reloader
A sidecar utility that watches for NATS configuration file changes and triggers server reloads.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
2 MB
2 tags · 3d agoView →
nginx exporter
Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
5 MB
8 tags · 2d agoView →
prometheus node exporter
Exports hardware- and OS-level metrics from a host for scraping by Prometheus.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
6 MB
15 tags · 2d agoView →
opentelemetry operator
OpenTelemetry Operator is a Kubernetes operator that manages OpenTelemetry
Collector and auto-instrumentation deployments. It provides custom resources
for configuring collectors, instrumenting applications, and managing
telemetry pipelines in Kubernetes clusters.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
opentelemetry target allocator
The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets
and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use
to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file
and CR-based discovery.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
34 MB
6 tags · 3d agoView →
postgresql exporter
A Prometheus exporter for monitoring PostgreSQL server metrics, exposing database statistics, connection info, and query performance.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Monitoring & observability
No tagsView →
prometheus adapter
Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes
HPA and VPA, exposing metrics from Prometheus.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
17 MB
6 tags · 2d agoView →
prometheus config reloader
Prometheus Config Reloader for use with Prometheus Operator.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
15 tags · 2d agoView →
prometheus nats exporter
A Prometheus exporter for NATS metrics, exposing server monitoring information including connections, subscriptions, routes, and JetStream statistics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
6 tags · 2d agoView →
prometheus operator
Kubernetes operator for managing Prometheus.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
17 MB
11 tags · 2d agoView →
prometheus operator admission webhook
Kubernetes webhook for managing Prometheus.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
12 MB
11 tags · 2d agoView →
statsd exporter
A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
7 tags · 2d agoView →
prometheus pushgateway
A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
7 MB
15 tags · 2d agoView →
redis exporter
A Prometheus exporter for monitoring Redis and Valkey servers, exposing metrics for memory usage, key counts, connections, and replication status.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Monitoring & observability
No tagsView →
telegraf
Telegraf is a plugin-driven server agent for collecting and reporting metrics.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Monitoring & observability
No tagsView →
vault k8s
vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
13 MB
13 tags · 3d agoView →
victoriametrics vmagent
VictoriaMetrics VMAgent is an agent that helps you collect metrics from various sources, relabel and filter the collected metrics and store them in VictoriaMetrics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
6 MB
3 tags · 3d agoView →
victoriametrics vmalert
VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
7 MB
5 tags · 3d agoView →
victoriametrics vmauth
VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
4 MB
3 tags · 3d agoView →
x.509 certificate exporter
A Prometheus exporter to monitor x509 certificates expiration in Kubernetes clusters or standalone
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
13 MB
9 tags · 3d agoView →
yet another cloudwatch exporter (yace)
YACE is a Prometheus exporter for AWS CloudWatch that auto-discovers resources through AWS tags and exposes their metrics with AWS tags as labels.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
7 MB
2 tags · 2d agoView →
Networking21
amazon-k8s-cni-init
Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
14 MB
8 tags · 3d agoView →
aws sigv4 proxy
This project signs and proxies HTTP requests with Sigv4
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
5 MB
9 tags · 3d agoView →
calico api server
Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
21 MB
9 tags · 11d agoView →
calico csi
Calico CSI driver for secure connections from Kubernetes pods to local daemons.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
calico goldmane
Calico flow aggregation service for network flow telemetry.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
calico node driver registrar
CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
calico webhooks
Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
cilium dns proxy
Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
22 MB
15 tags · 2d agoView →
cilium operator aws
cilium-operator-aws leverages AWS-native networking capabilities while providing advanced network security and observability features
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
33 MB
15 tags · 2d agoView →
contour
Contour is a Kubernetes ingress controller using Envoy proxy to provide
dynamic configuration updates and high performance load balancing. It
supports Ingress, HTTPProxy, and Gateway API.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
coredns
CoreDNS is a DNS server that chains plugins. It is written in Go and is designed to be fast and flexible. CoreDNS is used in cloud-native environments and is the default DNS server in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
20 MB
6 tags · 2d agoView →
envoy gateway
Envoy Gateway is an open source project for managing Envoy Proxy as a standalone
or Kubernetes-based application gateway.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
kubernetes ingress default backend
A minimal Kubernetes default backend server for unmatched ingress requests.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
2 MB
15 tags · 3d agoView →
knative serving activator
Buffers and routes requests for scaled-to-zero Knative Services.
The activator is a data-plane component of Knative Serving. It receives
requests for Revisions that have no available pods, reports load to the
autoscaler, and forwards traffic once capacity is ready.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Networking
No tagsView →
knative serving autoscaler
Scales Knative Services in response to request-driven load metrics.
The autoscaler is a control-plane component of Knative Serving. It collects
per-revision load statistics from the activator and queue-proxies, computes
the desired number of pods for each Revision, and drives scaling decisions
including scale-to-zero.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
15 MB
7 tags · 3d agoView →
knative serving controller
Reconciles Knative Serving resources into running Kubernetes workloads.
The controller is a control-plane component of Knative Serving. It watches
Services, Configurations, Routes, and Revisions and reconciles them into the
underlying Deployments, autoscaling resources, and networking objects that
run and route serverless workloads.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
17 MB
5 tags · 3d agoView →
knative serving webhook
Admission webhook for Knative Serving resources.
The webhook is a control-plane component of Knative Serving. It defaults
and validates Knative Serving custom resources through Kubernetes
admission control, and validates the Serving ConfigMaps.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
14 MB
7 tags · 3d agoView →
metallb controller
MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
17 MB
3 tags · 3d agoView →
metallb speaker
MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
32 MB
4 tags · 3d agoView →
multus dynamic networks controller
A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
12 MB
3 tags · 3d agoView →
tigera operator
Kubernetes operator for managing Calico and Calico Enterprise installations.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Networking
No tagsView →
Operating system1
Security33
cert-manager-acmesolver
CA injector component for cert-manager
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
cert-manager-cainjector
CA injector component cert-manager image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
14 MB
15 tags · 2d agoView →
cert-manager-webhook
A minimal Cert Manager webhook image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
16 MB
15 tags · 2d agoView →
connaisseur
A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
23 MB
5 tags · 3d agoView →
gatekeeper crds
Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
kube-mgmt
Sidecar for managing OPA instances in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
15 MB
16 tags · 2d agoView →
kube-rbac-proxy
a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
15 MB
16 tags · 3d agoView →
kyverno
Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
35 MB
15 tags · 2d agoView →
kyverno background controller
Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
34 MB
15 tags · 2d agoView →
kyverno cleanup controller
Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
kyverno cli
The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Security
No tagsView →
kyverno init
Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
31 MB
16 tags · 2d agoView →
kyverno policy reporter ui
The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
19 MB
9 tags · 3d agoView →
kyverno readiness checker
Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
8 MB
15 tags · 2d agoView →
kyverno reports controller
Kyverno Reports Controller is a component that continuously monitors and enforces policies on existing resources in a Kubernetes
0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- —
- Category
- Security
No tagsView →
kyverno reports server
Kyverno Reports server provides a scalable solution for storing policy reports and cluster policy reports.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
24 MB
6 tags · 3d agoView →
oauth2 proxy
A reverse proxy that provides authentication using OAuth2 and OIDC providers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
4 tags · 2d agoView →
open policy agent
OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
13 MB
8 tags · 2d agoView →
openfga
OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
pinniped cli
Pinniped CLI is a command-line utility for interacting with Pinniped
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
17 MB
5 tags · 2d agoView →
polaris
Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
sealed secrets controller
Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
sealed secrets kubeseal
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
7 tags · 2d agoView →
secrets store csi driver
Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
spicedb
An open source, Google Zanzibar-inspired database for fine-grained authorization.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
27 MB
18 tags · 2d agoView →
spiffe csi driver
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
5 MB
5 tags · 2d agoView →
spiffe helper
Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
6 MB
4 tags · 3d agoView →
spiffe spire agent
Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Security
No tagsView →
syft
Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
26 MB
16 tags · 2d agoView →
trivy
Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
43 MB
18 tags · 2d agoView →
trufflehog
TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
32 MB
18 tags · 2d agoView →
trust-manager
cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
8 tags · 2d agoView →
trust manager package
A trust manager package image that provides Debian CA certificates for use as an init container with cert-manager trust-manager.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
1 MB
10 tags · 2d agoView →
Web servers2
caddy
Fast, multi-purpose web server with automatic HTTPS
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- FIPS 140-3
- Category
- Web servers
No tagsView →
traefik
Traefik, The Cloud Native Edge Router
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
43 MB
9 tags · 3d agoView →
Other27
apache-activemq
Secure your stack with a hardened Apache-Activemq-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
174 MB
2 tags · 4d agoView →
T
trivy
Hardened open source image
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- Signed
58 MB
1 tag · 23d agoView →
falco-no-driver
Secure your stack with a hardened Falco-No-Driver image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
83 MB
2 tags · 4d agoView →
headlamp
Secure your stack with a FIPS-validated, hardened Headlamp image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
istio-proxy
Secure your stack with a hardened Istio Proxy image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
kiali
Secure your stack with a hardened Kiali image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
58 MB
1 tag · 4d agoView →
kubernetes-csi-driver-nfs
Provision FIPS-validated persistent volumes and shared NFS storage for Kubernetes workloads, with continuously updated packages and secure dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
44 MB
1 tag · 4d agoView →
kubernetes-csi-external-resizer
Secure your stack with a hardened Kubernetes-CSI-External-Resizer image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
43 MB
1 tag · 4d agoView →
kubernetes-csi-node-driver-registrar
Secure your stack with a hardened Kubernetes-CSI-Node-Driver-Registrar image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
32 MB
2 tags · 4d agoView →
kubernetes-csi-provisioner
Secure your stack with a hardened Kubernetes-CSI-Provisioner image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
45 MB
1 tag · 4d agoView →
kubevirt-cdi-apiserver
Secure your stack with a hardened Kubevirt-Cdi-Apiserver image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
kubevirt-cdi-cloner
Secure your stack with a hardened Kubevirt-Cdi-Cloner image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
37 MB
1 tag · 4d agoView →
kubevirt-cdi-controller
Secure your stack with a hardened KubeVirt-CDI-Controller image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
43 MB
1 tag · 4d agoView →
kubevirt-cdi-importer
Secure your stack with a hardened Kubevirt-Cdi-Importer image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
kubevirt-cdi-operator
Secure your stack with a hardened Kubevirt-Cdi-Operator image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
59 MB
1 tag · 4d agoView →
kubevirt-cdi-uploadproxy
Secure your stack with a hardened Kubevirt-Cdi-Uploadproxy image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
kubevirt-cdi-uploadserver
Secure your stack with a hardened Kubevirt-Cdi-Uploadserver image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
62 MB
1 tag · 4d agoView →
kubevirt-virt-api
Secure your stack with a FIPS-validated, Kubevirt-Virt-Api-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
46 MB
1 tag · 4d agoView →
kubevirt-virt-controller
Secure your stack with a hardened Kubevirt-Virt-Controller image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
44 MB
1 tag · 4d agoView →
kubevirt-virt-exportproxy
Secure your stack with a FIPS-validated, Kubevirt-Virt-Exportproxy-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEs
- OS
- —
- Architecture
- —
- Compliance
- CIS, FIPS 140-3
No tagsView →
kubevirt-virt-exportserver
Secure your stack with a FIPS-validated, Kubevirt-Virt-Exportserver-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
40 MB
1 tag · 4d agoView →
kubevirt-virt-handler
Secure your stack with a FIPS-validated, Kubevirt-Virt-Handler-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
62 MB
1 tag · 4d agoView →
kubevirt-virt-launcher
Secure your stack with a FIPS-validated, Kubevirt-Virt-Launcher-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
144 MB
1 tag · 4d agoView →
kubevirt-virt-operator
Secure your stack with a FIPS-validated, Kubevirt-Virt-Operator-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
61 MB
1 tag · 4d agoView →
kyvernopre
Secure your stack with a hardened Kyvernopre image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
72 MB
2 tags · 4d agoView →
percona-server-mongodb-operator
Secure your stack with a hardened Percona-Server-MongoDB-Operator-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
71 MB
1 tag · 4d agoView →
prometheus-redis-exporter
Secure your stack with a hardened Prometheus-Redis-Exporter image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
28 MB
2 tags · 4d agoView →