Image Catalog
Hardened, minimal container images — continuously rebuilt from upstream, vulnerability-scanned, cosign-signed, and available with FIPS 140-3 enabled variants.
583 images5618 tags1279 FIPS tags581 signed
261 results
Featured6
busybox
The Swiss Army Knife of Embedded Linux
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
1 MB
9 tags · 10d agoView →
eclipse temurin
The Eclipse Temurin project provides code and processes that support the building of runtime binaries and associated technologies that are high performance, enterprise-caliber, cross-platform, open-source licensed, and Java SE TCK-tested for general use across the Java ecosystem.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
34 MB
18 tags · 10d agoView →
nginx
nginx ("engine x") is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy server, and mail proxy server.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
4 MB
15 tags · 6d agoView →
node.js
Node.js is a JavaScript-based platform for server-side and networking applications.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
36 MB
20 tags · 10d agoView →
redis
Redis is the world's fastest data platform for caching, vector search, and NoSQL databases.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
24 MB
6 tags · 10d agoView →
traefik
Traefik, The Cloud Native Edge Router
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
42 MB
3 tags · 13d agoView →
API management6
envoy rate limit service
Envoy Rate Limit Service (ratelimit) is a Go/gRPC service that provides centralized
rate limiting for Envoy and other proxies.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- API management
8 MB
7 tags · 6d agoView →
external secrets operator
External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- API management
55 MB
6 tags · 6d agoView →
harbor registry
Docker Distribution registry for storing and distributing container images within Harbor
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- API management
7 MB
2 tags · 20d agoView →
cilium hubble proto
Protocol buffer definitions for Hubble, the networking and security observability platform for Cilium
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- API management
16 MB
4 tags · 10d agoView →
hubble ui backend
Backend API server for Cilium Hubble UI
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- API management
20 MB
1 tag · 20d agoView →
ory oathkeeper
Cloud native Identity & Access Proxy (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- API management
16 MB
2 tags · 14d agoView →
Databases & storage32
cdi api server
CDI API Server provides a Kubernetes API extension for managing virtual machine disk image imports in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
13 MB
6 tags · 6d agoView →
cdi upload proxy
CDI Upload Proxy forwards upload requests to the CDI upload server for virtual machine disk images
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
13 MB
5 tags · 14d agoView →
ceph csi operator
Ceph CSI Operator is a Kubernetes operator that deploys and manages the Ceph CSI drivers for RBD, CephFS, NFS, and NVMe-oF storage workloads.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
15 MB
1 tag · 24d agoView →
cloudnativepg
CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
31 MB
3 tags · 6d agoView →
cloudnativepg ba plugin
CloudnativePG Barman Cloud Plugin is a plugin for CloudnativePG for backing up and restoring Kubernetes Postgres clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
16 MB
2 tags · 14d agoView →
csi-addons sidecar
csi-addons-k8s-sidecar is the Kubernetes CSI-Addons sidecar that runs alongside a CSI driver to expose advanced storage operations such as reclaim space, network fence, encryption key rotation and volume replication to the CSI-Addons controller.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
24 MB
1 tag · 21d agoView →
csi attacher
csi-attacher is a Kubernetes CSI sidecar component that manages volume attachment and detachment operations by watching VolumeAttachment objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
16 MB
3 tags · 6d agoView →
csi external health monitor controller
csi-external-health-monitor-controller is a Kubernetes CSI sidecar component that monitors the health of CSI volumes and reports anomalies to the Kubernetes API.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
16 MB
2 tags · 6d agoView →
csi hostpath plugin
csi-hostpath-plugin is a Kubernetes CSI driver that uses the host's filesystem as storage, commonly used for testing and development purposes.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
6 MB
3 tags · 6d agoView →
csi provisioner
csi-provisioner is a Kubernetes CSI sidecar component that manages dynamic volume provisioning by watching PersistentVolumeClaim objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
17 MB
4 tags · 6d agoView →
csi resizer
csi-resizer is a Kubernetes CSI sidecar component that handles online volume expansion by watching PersistentVolumeClaim objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
16 MB
3 tags · 5d agoView →
csi snapshotter
csi-snapshotter is a Kubernetes CSI sidecar component that manages volume snapshots and restore operations by watching VolumeSnapshot objects and coordinating with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
17 MB
1 tag · 21d agoView →
eck operator
Elastic Cloud on Kubernetes operator for Elasticsearch, Kibana, APM, and more.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
18 MB
7 tags · 6d agoView →
etcd
Etcd is a strongly consistent, distributed key-value store that provides reliable data storage
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
9 MB
6 tags · 6d agoView →
hyperledger fabric peer
Peer node service for Hyperledger Fabric blockchain networks
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
11 MB
5 tags · 6d agoView →
kafka exporter
A Prometheus exporter for Kafka metrics
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
6 MB
1 tag · 20d agoView →
linstor affinity controller
Keeps Kubernetes PersistentVolume affinity in sync with LINSTOR volume placement for optimal workload scheduling.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
14 MB
1 tag · 19d agoView →
csi livenessprobe
livenessprobe is a Kubernetes CSI sidecar component that provides health checking capabilities for CSI drivers by monitoring driver endpoints and reporting liveness/readiness status to Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
7 MB
1 tag · 19d agoView →
local path provisioner
Kubernetes controller that dynamically provisions local persistent volumes backed by node-local storage using hostPath or local volume types.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
13 MB
2 tags · 18d agoView →
mongodb exporter
A Prometheus exporter for MongoDB metrics
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
11 MB
1 tag · 19d agoView →
mongodb controllers for kubernetes (mck)
A Kubernetes operator that enables users to run MongoDB in Kubernetes
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
18 MB
1 tag · 19d agoView →
mysql server exporter
A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
5 MB
4 tags · 6d agoView →
object storage sidecar
Object storage sidecar that manages bucket lifecycle by coordinating with COSI drivers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
13 MB
1 tag · 14d agoView →
openbao
OpenBao provides a solution to manage, store, and distribute sensitive data, including secrets, certificates, and keys
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
33 MB
1 tag · 14d agoView →
piraeus operator
Kubernetes operator that manages LINSTOR clusters and automates deployment, scaling, and management of LINSTOR storage clusters in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
25 MB
3 tags · 10d agoView →
redis
Redis is the world's fastest data platform for caching, vector search, and NoSQL databases.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
24 MB
6 tags · 10d agoView →
seaweedfs
Fast distributed storage system for billions of files with S3 API and object storage support
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
41 MB
2 tags · 12d agoView →
snapshot controller
Kubernetes controller that watches VolumeSnapshot and VolumeSnapshotContent objects
and coordinates snapshot operations with CSI drivers.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
13 MB
2 tags · 14d agoView →
spicedb operator
SpiceDB Operator manages SpiceDB authorization database instances in Kubernetes via SpiceDBCluster custom resources, handling provisioning, configuration, and version upgrades.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
18 MB
3 tags · 13d agoView →
velero
Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Databases & storage
40 MB
2 tags · 6d agoView →
victoriametrics vminsert
VictoriaMetrics VMInsert is the ingestion component for a VictoriaMetrics cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
5 MB
1 tag · 6d agoView →
victoriametrics vmselect
VictoriaMetrics VMSelect is the query component for a VictoriaMetrics cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Databases & storage
6 MB
1 tag · 6d agoView →
Developer tools52
alpine base
A secure, ultra-minimal Alpine Linux base image with essential system utilities for building lightweight containerized applications.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
3 MB
7 tags · 6d agoView →
azure service operator
Azure Service Operator allows you to create Azure resources using kubectl.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
69 MB
12 tags · 6d agoView →
bats
Bash Automated Testing System - TAP-compliant testing framework for Bash
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
14 MB
12 tags · 14d agoView →
prometheus blackbox exporter
Prometheus exporter for probing network endpoints via HTTP, HTTPS, DNS, TCP, ICMP, and gRPC.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
8 MB
20 tags · 24d agoView →
buildkite mcp server
The official Buildkite MCP Server connects AI tools to the Buildkite API, giving AI agents, assistants, and chatbots access to pipelines, builds, jobs, and test runs through the Model Context Protocol.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
14 MB
3 tags · 12d agoView →
busybox
The Swiss Army Knife of Embedded Linux
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
1 MB
9 tags · 10d agoView →
cert-manager-startupapicheck
A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
9 MB
12 tags · 18d agoView →
chartmuseum
An open-source Helm Chart Repository server with support for cloud and local storage backends.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
19 MB
9 tags · 6d agoView →
kubernetes cloud controller manager (cloud-controller-manager)
Runs cloud-provider-specific control loops in the Kubernetes control plane.
cloud-controller-manager embeds the cloud-specific control loops that integrate
a Kubernetes cluster with the underlying cloud provider's APIs.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
18 MB
11 tags · 6d agoView →
configmap-reload
A simple binary to trigger a reload when Kubernetes ConfigMaps or Secrets are updated. It watches mounted volume dirs and notifies the target process that the config map has been changed.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
3 tags · 21d agoView →
cosign
Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
25 MB
18 tags · 6d agoView →
crane
Crane is a tool for interacting with remote images and registries. It allows to efficiently inspect, verify and manipulate containers, manifests and image layers as well as checking cryptographic signatures.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
14 tags · 6d agoView →
csi node driver registrar
Sidecar container that registers a CSI driver with the kubelet using the kubelet plugin registration mechanism.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
7 MB
3 tags · 6d agoView →
curl
command line tool and library for transferring data with URLs
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
5 MB
6 tags · 14d agoView →
delve
Delve is a debugger for the Go programming language.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
6 MB
8 tags · 6d agoView →
externaldns
ExternalDNS synchronizes exposed Kubernetes Services and Ingresses with DNS providers.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
29 MB
8 tags · 6d agoView →
actions runner controller
Kubernetes controller that orchestrates ephemeral self-hosted GitHub Actions runners using autoscaling runner scale sets.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
49 MB
3 tags · 6d agoView →
github mcp server
GitHub's official MCP Server connects AI tools directly to GitHub's platform. This gives AI agents, assistants, and chatbots the ability to read repositories and code files, manage issues and PRs, analyze code, and automate workflows.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
7 MB
11 tags · 10d agoView →
jsonnet
A configuration language for app and tool developers. A simple extension of JSON. Eliminate duplication with object-orientation.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
4 MB
1 tag · 20d agoView →
goldilocks
A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
12 MB
5 tags · 6d agoView →
grafana mcp server
A Model Context Protocol server for Grafana that provides AI agents with access to Grafana dashboards, datasources, alerting, incidents, and observability features. Enables LLMs to query metrics, logs, traces, and manage Grafana resources.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
15 MB
3 tags · 6d agoView →
helm
Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
21 MB
6 tags · 5d agoView →
http echo
A lightweight Go web server that serves provided content as an HTML page, ideal for demos and testing.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
3 MB
3 tags · 14d agoView →
httpbin
A simple HTTP request and response service for testing HTTP clients, libraries, and proxies.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
30 MB
11 tags · 10d agoView →
k6
Grafana k6 is a modern load testing tool using Go and JavaScript for performance testing
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
16 MB
7 tags · 10d agoView →
k6-operator
An operator for running distributed k6 tests.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
14 MB
3 tags · 14d agoView →
k8ssandra-client
kubectl plugin for managing K8ssandra clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
60 MB
6 tags · 6d agoView →
kubernetes api server (kube-apiserver)
Front end for the Kubernetes control plane.
kube-apiserver exposes the Kubernetes API over HTTP(S), performs request validation,
authentication and authorization, runs admission control, and persists cluster state
to an etcd backend.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
26 MB
21 tags · 10d agoView →
kubernetes controller manager (kube-controller-manager)
Runs core control loops in the Kubernetes control plane.
kube-controller-manager runs controller processes that regulate the state of the
cluster and perform routine tasks.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
23 MB
18 tags · 10d agoView →
kubernetes proxy (kube-proxy)
Maintains network rules on nodes to enable service virtual IPs and load balancing.
kube-proxy reflects services defined in the Kubernetes API and maintains network
rules on nodes to implement service behavior.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
18 MB
16 tags · 10d agoView →
kubernetes scheduler (kube-scheduler)
Schedules pods onto nodes.
kube-scheduler watches for newly created pods with no assigned node, and selects
a node for them to run on.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
19 MB
19 tags · 6d agoView →
kube webhook certgen
Certificate generator and patcher for Kubernetes admission webhooks.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
8 MB
4 tags · 14d agoView →
kubectl
Kubernetes provides a command line tool for communicating with a Kubernetes cluster's control plane, using the Kubernetes API.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
30 MB
18 tags · 6d agoView →
grafana loki helm test
A collection of go tests that test if a Loki canary is running correctly.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
6 MB
7 tags · 5d agoView →
nats cli
A command line utility to interact with and manage NATS.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
9 MB
1 tag · 19d agoView →
open cluster management addon manager
Runs on the hub cluster and configures the installation of addon agents for each managed cluster.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
22 MB
1 tag · 14d agoView →
opentelemetry go autoinstrumentation
This is a Golang autoinstrumentation agent used by the OpenTelemetry Operator
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
16 MB
2 tags · 14d agoView →
opentelemetry collector
OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives,
processes, and exports traces, metrics and logs. It is used as a standalone
gateway or as an agent to centralize telemetry collection and forward data to
backends such as Prometheus, Tempo, Jaeger, or commercial APMs.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
41 MB
5 tags · 14d agoView →
oras
ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
5 MB
3 tags · 14d agoView →
postman mcp server
The official Postman MCP server that connects AI tools and assistants to the Postman API — managing collections, workspaces, environments, API specifications, and more — via stdio transport with Minimal, Code, and Full toolset configurations.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
45 MB
5 tags · 10d agoView →
pyroscope
Grafana Pyroscope is an open source software project for aggregating continuous profiling data.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
51 MB
3 tags · 18d agoView →
redis mcp server
A Model Context Protocol server that lets AI agents interact with Redis databases using natural language.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
53 MB
12 tags · 6d agoView →
regctl
regctl is a CLI interface for Docker and OCI registries. It provides efficient registry operations without requiring a container runtime, supporting multi-platform images, OCI artifacts, and content manipulation.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
5 MB
3 tags · 18d agoView →
registration operator
Kubernetes operator for managing Open Cluster Management hub and spoke components.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
23 MB
1 tag · 18d agoView →
docker scout cli
Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
53 MB
2 tags · 14d agoView →
docker scout sbom indexer
A specialized tool for generating Software Bill of Materials (SBOM) by scanning file systems and indexing packages for Docker Scout and BuildKit integration.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
46 MB
1 tag · 18d agoView →
shellcheck
ShellCheck is a shell script static analysis tool that gives warnings and suggestions for bash/sh shell scripts to point out and clarify syntax issues, semantic problems and subtle caveats, corner cases and pitfalls
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
9 MB
1 tag · 14d agoView →
snyk cli
Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
67 MB
2 tags · 14d agoView →
static
A very minimal image that is most useful in the context of running binary executables, such as those built from Rust and Golang.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
<1 MB
7 tags · 10d agoView →
grafana tempo
Grafana Tempo is an open source, easy-to-use, and high-scale distributed tracing backend.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
32 MB
5 tags · 6d agoView →
tempo query
A minimal Grafana Tempo Query (Jaeger storage plugin) image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Developer tools
7 MB
4 tags · 6d agoView →
time mcp server
A Model Context Protocol server providing tools for time queries and timezone conversions for LLMs.
0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Developer tools
36 MB
4 tags · 10d agoView →
Integration & delivery29
argo workflow controller
Argo Workflow Controller is a Kubernetes-native workflow engine supporting DAG and step-based workflows.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
42 MB
18 tags · 6d agoView →
aws load balancer controller
The AWS Load Balancer Controller manages AWS Elastic Load Balancers for Kubernetes clusters, provisioning ALBs for Ingress resources and NLBs for Service resources.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
20 MB
21 tags · 14d agoView →
aws node termination handler
Gracefully handles EC2 instance termination events in Kubernetes by cordoning and draining nodes before shutdown, supporting spot interruptions, scheduled maintenance, and ASG scale-in events.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
16 MB
5 tags · 19d agoView →
aws private ca issuer
AWS Private CA is an AWS service that can setup and manage private CAs, as well as issue private certificates.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
10 MB
5 tags · 14d agoView →
azure key vault controller
Kubernetes controller that synchronizes Azure Key Vault secrets, certificates, and keys into native Kubernetes Secrets via the AzureKeyVaultSecret CRD.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
13 MB
5 tags · 19d agoView →
cert manager controller
Controller component for cert-manager
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
20 MB
20 tags · 18d agoView →
cert-manager-istio-csr
Certificate signing request agent for integrating cert-manager with Istio
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
22 MB
5 tags · 14d agoView →
dapr injector
Kubernetes admission controller that automatically injects the Dapr sidecar container into pods, enabling Dapr capabilities for applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
1 tag · 21d agoView →
dapr operator
Kubernetes operator that manages Dapr component Custom Resources (state stores, pub/sub, bindings, etc.) and provides validation webhooks for component configurations.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
1 tag · 21d agoView →
dapr placement service
Kubernetes control plane service that manages actor placement using a consistent hash ring, enabling distributed actor instances across the cluster with automatic rebalancing.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
13 MB
2 tags · 6d agoView →
dapr scheduler
A Dapr control-plane service that manages persistent job scheduling, reminders, and timers for distributed applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
16 MB
2 tags · 6d agoView →
dapr sentry
Dapr Sentry certificate authority that issues mTLS certificates for secure communication between Dapr sidecars and control plane components.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
1 tag · 21d agoView →
distribution registry
The toolkit to pack, ship, store, and deliver container content
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
15 MB
1 tag · 21d agoView →
helm controller
Flux CD component that manages the lifecycle of Helm charts declared as HelmRelease resources in Kubernetes, enabling GitOps-driven Helm deployments.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
22 MB
5 tags · 6d agoView →
image reflector controller
Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
17 MB
3 tags · 6d agoView →
notification controller
Flux CD component that dispatches events to external notification providers and exposes a webhook receiver endpoint for triggering reconciliation from external systems.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
21 MB
10 tags · 10d agoView →
source watcher
Flux CD source-watcher is a reference implementation and example controller that watches Flux source objects (GitRepository, HelmRepository, HelmChart) and generates artifacts, useful as a template for building custom Flux-based controllers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
2 tags · 14d agoView →
gatekeeper
Policy Controller for Kubernetes, built on Open Policy Agent.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
21 MB
4 tags · 6d agoView →
gitlab shell
GitLab Shell handles Git SSH sessions for GitLab — SSH authentication and authorization for Git operations, including the gitlab-sshd server used by cloud-native deployments.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
72 MB
4 tags · 6d agoView →
istio install cni
Istio CNI installer image and daemonset for Kubernetes environments
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
74 MB
2 tags · 20d agoView →
nodelocal dns cache
Node-local DNS caching agent for Kubernetes nodes, built on CoreDNS
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
16 MB
4 tags · 10d agoView →
karpenter
karpenter is an efficient node manager for kubernetes clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
21 MB
1 tag · 20d agoView →
keda admission webhooks
KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
14 MB
2 tags · 20d agoView →
kubernetes cluster autoscaler
Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
35 MB
2 tags · 19d agoView →
notation
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
4 MB
3 tags · 14d agoView →
placement
A Kubernetes controller that makes placement decisions for workloads across managed clusters based on Placement APIs.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
21 MB
1 tag · 14d agoView →
open cluster management registration
Registration controller and agent for Open Cluster Management hub and spoke cluster lifecycle.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
24 MB
1 tag · 14d agoView →
open cluster management work
Work agent for dispatching Kubernetes manifests to managed clusters via the ManifestWork API.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Integration & delivery
23 MB
1 tag · 14d agoView →
virt export proxy
Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Integration & delivery
15 MB
1 tag · 6d agoView →
Languages & frameworks11
amazon corretto
The Amazon Corretto OpenJDK.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
201 MB
19 tags · 14d agoView →
.net
.NET is the free, open-source, cross-platform framework for building modern apps and powerful cloud services.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
217 MB
19 tags · 5d agoView →
eclipse temurin
The Eclipse Temurin project provides code and processes that support the building of runtime binaries and associated technologies that are high performance, enterprise-caliber, cross-platform, open-source licensed, and Java SE TCK-tested for general use across the Java ecosystem.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
34 MB
18 tags · 10d agoView →
erlang/otp
Erlang is a programming language used to build massively scalable systems with high availability.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
34 MB
13 tags · 10d agoView →
gradle
Gradle is a build tool with a focus on build automation and support for multi-language development.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
319 MB
21 tags · 6d agoView →
hyperledger fabric orderer
Orderer service that runs as part Hyperledger Fabric networks and provides an atomic broadcast ordering service for consumption by the peers
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
9 MB
2 tags · 20d agoView →
hyperledger fabric tools
CLI tools for managing Hyperledger Fabric networks
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
63 MB
2 tags · 20d agoView →
node.js
Node.js is a JavaScript-based platform for server-side and networking applications.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
36 MB
20 tags · 10d agoView →
perl
Perl is a high-level, general-purpose, interpreted, dynamic programming language known for its text processing capabilities and extensive CPAN ecosystem.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
16 MB
7 tags · 10d agoView →
ruby
The Ruby programming language
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Languages & frameworks
10 MB
14 tags · 10d agoView →
rust
Rust is a systems programming language focused on safety, speed, and concurrency.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Languages & frameworks
190 MB
7 tags · 10d agoView →
Machine learning & AI3
k8s device plugin
NVIDIA device plugin for Kubernetes that exposes GPUs to the Kubernetes scheduler,
provides GPU health monitoring, and supports MIG, MPS, time-slicing, and CDI.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Machine learning & AI
39 MB
1 tag · 20d agoView →
nvflare
NVIDIA Federated Learning Application Runtime Environment for privacy-preserving distributed AI.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Machine learning & AI
58 MB
10 tags · 10d agoView →
tensorflow serving
A flexible, high-performance serving system for machine learning models designed for production environments
FIPS available0 CVEsSigned
- OS
- —
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Machine learning & AI
136 MB
3 tags · 6d agoView →
Monitoring & observability39
access log exporter
A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
4 MB
10 tags · 6d agoView →
azure metrics exporter
Azure Monitor metrics exporter for Prometheus
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
6 MB
5 tags · 19d agoView →
beat exporter
Prometheus exporter for Elastic Beats stats endpoints.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
4 MB
9 tags · 24d agoView →
grafana beyla
Grafana Beyla is an eBPF-based application auto-instrumentation tool that captures OpenTelemetry traces and metrics for web services and network flows without code changes.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
36 MB
6 tags · 6d agoView →
cert exporter
A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
8 tags · 6d agoView →
clickhouse metrics exporter
Altinity's official Prometheus metrics exporter that automatically discovers and monitors ClickHouse clusters managed by the ClickHouse Operator, providing comprehensive operational metrics through a standard `/metrics` endpoint for Prometheus scraping.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
6 tags · 6d agoView →
clickhouse operator
Altinity's Kubernetes operator for managing ClickHouse clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
14 MB
5 tags · 6d agoView →
datadog operator
The Datadog Operator is a Kubernetes operator that manages Datadog Agent deployments and related Datadog resources through custom resources.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
32 MB
7 tags · 6d agoView →
descheduler
Kubernetes descheduler that evicts pods to improve workload placement.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
19 MB
3 tags · 6d agoView →
filebeat
Filebeat sends log files to Logstash or directly to Elasticsearch
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
87 MB
14 tags · 6d agoView →
grafana operator
A Kubernetes operator for managing Grafana instances, dashboards, and datasources declaratively.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
16 MB
2 tags · 6d agoView →
grafana rollout operator
A Kubernetes operator for coordinating the rollout of Grafana pods between different StatefulSets
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
15 MB
2 tags · 14d agoView →
cilium hubble export to stdout
Streams Hubble network flow export logs to stdout for log collection
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
<1 MB
3 tags · 10d agoView →
cilium hubble relay
Relay server for aggregating and exposing Hubble observability data
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
19 MB
4 tags · 10d agoView →
istio pilot
Istio control plane component that configures proxies and handles service discovery
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
27 MB
4 tags · 12d agoView →
istioctl
Istioctl image for managing Istio deployments
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
24 MB
2 tags · 20d agoView →
jaeger ingester
Jaeger v2 unified binary preconfigured to ingest spans from Kafka into a storage backend.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
23 MB
2 tags · 20d agoView →
jaeger query
Jaeger Query is the Jaeger v2 distributed-tracing query service: it serves the Jaeger UI and the HTTP/gRPC query API for retrieving traces from a storage backend.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
23 MB
2 tags · 20d agoView →
karma
Karma is an alert dashboard for Prometheus Alertmanager that aggregates alerts from multiple Alertmanager instances, deduplicates and groups them, and provides silence management.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
8 MB
7 tags · 10d agoView →
prometheus memcached exporter
Exports memcached server metrics for scraping by Prometheus.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
1 tag · 19d agoView →
metrics server
Metrics Server is a scalable, efficient source of container resource metrics for Kubernetes built-in autoscaling pipelines. It collects resource metrics from Kubelets and exposes them in Kubernetes apiserver through Metrics API for use by Horizontal Pod Autoscaler and Vertical Pod Autoscaler.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
18 MB
4 tags · 14d agoView →
nats server config reloader
A sidecar utility that watches for NATS configuration file changes and triggers server reloads.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
2 MB
1 tag · 19d agoView →
nginx exporter
Nginx exporter makes it possible to monitor Nginx or Nginx Plus with Prometheus by exposing metrics in Prometheus format.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
5 MB
2 tags · 6d agoView →
prometheus node exporter
Exports hardware- and OS-level metrics from a host for scraping by Prometheus.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
6 MB
3 tags · 19d agoView →
opentelemetry operator
OpenTelemetry Operator is a Kubernetes operator that manages OpenTelemetry
Collector and auto-instrumentation deployments. It provides custom resources
for configuring collectors, instrumenting applications, and managing
telemetry pipelines in Kubernetes clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
18 MB
2 tags · 6d agoView →
opentelemetry target allocator
The Target Allocator (TA) is an optional component of the OpenTelemetry Operator that discovers Prometheus targets
and shards them across a fleet of OpenTelemetry Collector instances. It provides HTTP endpoints that Collectors use
to fetch their assigned scrape targets (e.g. /jobs, /jobs/{job}/targets, /scrape_configs) and supports config-file
and CR-based discovery.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
34 MB
2 tags · 10d agoView →
postgresql exporter
A Prometheus exporter for monitoring PostgreSQL server metrics, exposing database statistics, connection info, and query performance.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
6 MB
1 tag · 18d agoView →
prometheus adapter
Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes
HPA and VPA, exposing metrics from Prometheus.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
17 MB
2 tags · 5d agoView →
prometheus config reloader
Prometheus Config Reloader for use with Prometheus Operator.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
11 MB
6 tags · 10d agoView →
prometheus nats exporter
A Prometheus exporter for NATS metrics, exposing server monitoring information including connections, subscriptions, routes, and JetStream statistics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
3 tags · 10d agoView →
prometheus operator
Kubernetes operator for managing Prometheus.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
17 MB
5 tags · 6d agoView →
prometheus operator admission webhook
Kubernetes webhook for managing Prometheus.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
12 MB
4 tags · 10d agoView →
statsd exporter
A Prometheus exporter that receives StatsD-style metrics and exports them as Prometheus metrics via configurable mapping rules and tagging formats.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
5 MB
1 tag · 18d agoView →
prometheus pushgateway
A push gateway for Prometheus that accepts metrics from ephemeral or batch jobs and exposes them for scraping by Prometheus.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
7 MB
3 tags · 18d agoView →
redis exporter
A Prometheus exporter for monitoring Redis and Valkey servers, exposing metrics for memory usage, key counts, connections, and replication status.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Monitoring & observability
5 MB
2 tags · 13d agoView →
telegraf
Telegraf is a plugin-driven server agent for collecting and reporting metrics.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
72 MB
3 tags · 6d agoView →
vault csi provider
vault-csi-provider is HashiCorp's official Kubernetes integration that securely mounts Vault secrets as files in pod containers using the Container Storage Interface, enabling applications to access centralized secrets without code changes or embedded credentials.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
12 MB
2 tags · 13d agoView →
vault k8s
vault-k8s is HashiCorp's Kubernetes integration that automatically injects Vault Agent containers into pods via a mutating admission webhook, enabling applications to seamlessly access HashiCorp Vault secrets without code changes by intercepting pod creation, reading annotations, and modifying pod specifications to include secret retrieval and rendering capabilities.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
13 MB
5 tags · 6d agoView →
victoriametrics vmauth
VictoriaMetrics VMAuth is an HTTP proxy for authorizing, routing, and load balancing requests to VictoriaMetrics components.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Monitoring & observability
4 MB
1 tag · 6d agoView →
Networking25
amazon-k8s-cni-init
Init container for AWS VPC CNI that copies CNI artifacts to the host and performs initial node network configuration.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
14 MB
6 tags · 13d agoView →
aws sigv4 proxy
This project signs and proxies HTTP requests with Sigv4
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
5 MB
6 tags · 14d agoView →
calico api server
Calico aggregated API server that exposes projectcalico.org APIs through the Kubernetes API aggregation layer.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
21 MB
5 tags · 24d agoView →
calico cni
Calico CNI plugin provides networking and network policy for Kubernetes clusters
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
27 MB
9 tags · 6d agoView →
calico csi
Calico CSI driver for secure connections from Kubernetes pods to local daemons.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
5 MB
8 tags · 19d agoView →
calico ctl
Calico command-line tool (calicoctl) for managing Calico network and security configuration in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
17 MB
4 tags · 24d agoView →
calico goldmane
Calico flow aggregation service for network flow telemetry.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
23 MB
5 tags · 6d agoView →
calico node driver registrar
CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
7 MB
4 tags · 19d agoView →
calico webhooks
Validating admission webhook server for Calico tiered RBAC enforcement on policy resources.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
15 MB
2 tags · 6d agoView →
cilium dns proxy
Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
22 MB
7 tags · 6d agoView →
cilium operator aws
cilium-operator-aws leverages AWS-native networking capabilities while providing advanced network security and observability features
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
33 MB
18 tags · 14d agoView →
contour
Contour is a Kubernetes ingress controller using Envoy proxy to provide
dynamic configuration updates and high performance load balancing. It
supports Ingress, HTTPProxy, and Gateway API.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
16 MB
6 tags · 6d agoView →
coredns
CoreDNS is a DNS server that chains plugins. It is written in Go and is designed to be fast and flexible. CoreDNS is used in cloud-native environments and is the default DNS server in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
20 MB
2 tags · 6d agoView →
kubernetes ingress default backend
A minimal Kubernetes default backend server for unmatched ingress requests.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
3 MB
2 tags · 20d agoView →
knative serving activator
Buffers and routes requests for scaled-to-zero Knative Services.
The activator is a data-plane component of Knative Serving. It receives
requests for Revisions that have no available pods, reports load to the
autoscaler, and forwards traffic once capacity is ready.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
15 MB
2 tags · 20d agoView →
knative serving autoscaler
Scales Knative Services in response to request-driven load metrics.
The autoscaler is a control-plane component of Knative Serving. It collects
per-revision load statistics from the activator and queue-proxies, computes
the desired number of pods for each Revision, and drives scaling decisions
including scale-to-zero.
0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
15 MB
4 tags · 20d agoView →
knative serving controller
Reconciles Knative Serving resources into running Kubernetes workloads.
The controller is a control-plane component of Knative Serving. It watches
Services, Configurations, Routes, and Revisions and reconciles them into the
underlying Deployments, autoscaling resources, and networking objects that
run and route serverless workloads.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
17 MB
2 tags · 20d agoView →
knative serving webhook
Admission webhook for Knative Serving resources.
The webhook is a control-plane component of Knative Serving. It defaults
and validates Knative Serving custom resources through Kubernetes
admission control, and validates the Serving ConfigMaps.
0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
14 MB
3 tags · 1h agoView →
ktls-utils
Handshake service for kernel TLS consumers
FIPS available0 CVEsSigned
- OS
- —
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
9 MB
2 tags · 6d agoView →
metallb controller
MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
17 MB
1 tag · 19d agoView →
metallb speaker
MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
32 MB
1 tag · 19d agoView →
multus dynamic networks controller
A Kubernetes controller granting the ability to plug/unplug network interfaces to/from running pods.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
12 MB
1 tag · 19d agoView →
nginx ingress controller
NGINX Ingress Controller for Kubernetes from the nginx/kubernetes-ingress project.
Provides a production-grade Ingress controller based on NGINX, with support for Kubernetes Ingress resources and
NGINX custom resources (VirtualServer, VirtualServerRoute, TransportServer) when enabled.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Networking
61 MB
1 tag · 19d agoView →
stunnel
stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.
FIPS available0 CVEsSigned
- OS
- —
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
7 MB
1 tag · 14d agoView →
tigera operator
Kubernetes operator for managing Calico and Calico Enterprise installations.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Networking
20 MB
2 tags · 13d agoView →
Operating system1
Security30
cert-manager-acmesolver
CA injector component for cert-manager
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
7 MB
14 tags · 6d agoView →
cert-manager-cainjector
CA injector component cert-manager image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
14 MB
12 tags · 18d agoView →
cert-manager-webhook
A minimal Cert Manager webhook image
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
16 MB
12 tags · 18d agoView →
connaisseur
A Kubernetes admission controller to integrate container image signature verification and trust pinning into a cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
23 MB
3 tags · 6d agoView →
gatekeeper crds
Packages Gatekeeper Custom Resource Definitions and kubectl for deploying OPA-based policy enforcement on Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
30 MB
1 tag · 14d agoView →
kube-mgmt
Sidecar for managing OPA instances in Kubernetes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
15 MB
6 tags · 5d agoView →
kube-rbac-proxy
a small HTTP proxy for a single upstream, that can perform RBAC authorization against the Kubernetes API using SubjectAccessReview.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
15 MB
3 tags · 20d agoView →
kyverno
Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
34 MB
5 tags · 18d agoView →
kyverno background controller
Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
33 MB
4 tags · 18d agoView →
kyverno cleanup controller
Kyverno is a component that continuously monitors and enforces policies on existing resources in the cluster, ensuring ongoing compliance.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
31 MB
4 tags · 18d agoView →
kyverno cli
The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
36 MB
4 tags · 18d agoView →
kyverno init
Kyverno is a component that continuously monitors and enforces policies on existing resources in a kubernetes cluster, ensuring ongoing compliance.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
30 MB
5 tags · 18d agoView →
kyverno readiness checker
Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
4 tags · 18d agoView →
kyverno reports controller
Kyverno Reports Controller is a component that continuously monitors and enforces policies on existing resources in a Kubernetes
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
33 MB
5 tags · 18d agoView →
oauth2 proxy
A reverse proxy that provides authentication using OAuth2 and OIDC providers.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
9 MB
1 tag · 14d agoView →
open policy agent
OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
13 MB
2 tags · 14d agoView →
openfga
OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
23 MB
3 tags · 14d agoView →
pinniped cli
Pinniped CLI is a command-line utility for interacting with Pinniped
0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, Signed
- Category
- Security
17 MB
2 tags · 14d agoView →
polaris
Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
13 MB
4 tags · 10d agoView →
sealed secrets controller
Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
12 MB
1 tag · 18d agoView →
sealed secrets kubeseal
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
3 tags · 6d agoView →
secrets store csi driver
Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
12 MB
2 tags · 14d agoView →
spicedb
An open source, Google Zanzibar-inspired database for fine-grained authorization.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
26 MB
4 tags · 6d agoView →
spiffe csi driver
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
5 MB
2 tags · 6d agoView →
spiffe helper
Tool that retrieves and manages SVIDs on behalf of a workload via the SPIFFE Workload API.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
6 MB
1 tag · 14d agoView →
spiffe spire agent
Workload agent that attests to SPIRE Server and issues SPIFFE workload identities to local processes.
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
19 MB
3 tags · 6d agoView →
syft
Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
26 MB
9 tags · 6d agoView →
trivy
Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
43 MB
7 tags · 12d agoView →
trufflehog
TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
31 MB
3 tags · 13d agoView →
trust-manager
cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters
FIPS available0 CVEsSigned
- OS
- Debian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Security
10 MB
1 tag · 13d agoView →
Web servers2
nginx
nginx ("engine x") is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy server, and mail proxy server.
FIPS available0 CVEsSigned
- OS
- AlpineDebian
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
4 MB
15 tags · 6d agoView →
traefik
Traefik, The Cloud Native Edge Router
FIPS available0 CVEsSigned
- OS
- Alpine
- Architecture
- amd64
- Compliance
- CIS, FIPS 140-3, Signed
- Category
- Web servers
42 MB
3 tags · 13d agoView →
Other31
amazon-cloudwatch-agent
Secure your stack with a hardened Amazon CloudWatch Agent image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
81 MB
3 tags · 11d agoView →
amazon-cloudwatch-agent-operator
Secure your stack with a FIPS-validated, hardened Amazon CloudWatch Agent Operator image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
62 MB
4 tags · 11d agoView →
amazon-corretto-jre
Secure your stack with a hardened Amazon-Corretto-JRE image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
128 MB
7 tags · 11d agoView →
apache-exporter
Secure your stack with a hardened, FIPS-validated Apache Exporter image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
28 MB
2 tags · 11d agoView →
T
trivy
Open-source image mirrored from docker.io
0 CVEsSigned
- OS
- —
- Architecture
- amd64
- Compliance
- Signed
58 MB
1 tag · 3d agoView →
argo-cli
Secure your stack with a hardened Argo CLI image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
76 MB
6 tags · 11d agoView →
asterisk
Secure your stack with a hardened Asterisk image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
47 MB
6 tags · 11d agoView →
authservice
Secure your stack with a hardened Authservice image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
41 MB
2 tags · 11d agoView →
aws-for-fluent-bit
Secure your stack with a hardened AWS for Fluent Bit image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
61 MB
5 tags · 11d agoView →
aws-otel-collector
Secure your stack with a hardened AWS-OTel-Collector image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
90 MB
2 tags · 11d agoView →
aws-s3-controller
Secure your stack with a hardened, FIPS-validated AWS S3 Controller image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
42 MB
4 tags · 11d agoView →
aws-volume-modifier-for-k8s
Secure your stack with a hardened aws-volume-modifier-for-k8s image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
40 MB
3 tags · 11d agoView →
az
Manage Azure resources and automate cloud deployments from the terminal, using a FIPS-validated image with continuously updated packages and dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
78 MB
7 tags · 11d agoView →
buildpacks-lifecycle
Secure your stack with a hardened Buildpacks-Lifecycle image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
33 MB
5 tags · 11d agoView →
cadvisor
Secure your stack with a hardened cAdvisor image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
34 MB
3 tags · 11d agoView →
calico-key-cert-provisioner
Secure your stack with a hardened Calico-Key-Cert-Provisioner-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
37 MB
5 tags · 11d agoView →
cert-manager-cmctl
Secure your stack with a hardened cert-manager-cmctl image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
55 MB
1 tag · 1mo agoView →
cert-manager-openshift-routes
Secure your stack with a hardened Cert-Manager-Openshift-Routes-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
49 MB
1 tag · 1mo agoView →
cert-manager-webhook-pdns
Automate ACME DNS-01 challenge validation for PowerDNS zones with FIPS-validated cryptography, backed by continuously updated packages and dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
47 MB
1 tag · 1mo agoView →
cfssl
Secure your stack with a hardened Cfssl-FIPS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
89 MB
2 tags · 11d agoView →
cilium-hubble-ui-backend
Secure your stack with a hardened Cilium-Hubble-UI-Backend image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
46 MB
1 tag · 1mo agoView →
velero-plugin-for-aws
Secure your stack with a hardened Velero-Plugin-for-AWS image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
47 MB
1 tag · 11d agoView →
velero-plugin-for-gcp
Secure your stack with a hardened Velero-Plugin-For-Gcp image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
46 MB
2 tags · 6d agoView →
velero-plugin-for-microsoft-azure
Secure your stack with a hardened Velero-Plugin-for-Microsoft-Azure image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
40 MB
1 tag · 11d agoView →
versitygw
Secure your stack with a hardened, FIPS-validated Versity S3 Gateway image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
43 MB
2 tags · 11d agoView →
victoriametrics-vmagent
Secure your stack with a hardened VictoriaMetrics vmagent image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
29 MB
3 tags · 6d agoView →
victoriametrics-vmalert
Secure your stack with a hardened VictoriaMetrics vmalert image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
31 MB
2 tags · 11d agoView →
wait-for-it
Secure your stack with a hardened Wait-For-It image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
30 MB
2 tags · 11d agoView →
wbitt-network-multitool
Secure your stack with a hardened, FIPS-validated WBITT Network MultiTool image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
100 MB
3 tags · 10d agoView →
x509-certificate-exporter
Secure your stack with a hardened X509-Certificate-Exporter image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
38 MB
2 tags · 11d agoView →
zot
Secure your stack with a hardened Zot image freshly-built by Minimus. Minimus images always include the most up-to-date package version for all packages and dependencies contained in the image.
FIPS available0 CVEsSigned
- OS
- Distroless
- Architecture
- amd64
- Compliance
- FIPS 140-3, Signed
131 MB
2 tags · 10d agoView →