Cosign

Docker Hardened Image

Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.

curl

Docker Hardened Image

command line tool and library for transferring data with URLs

Grafana Loki

Docker Hardened Image

Loki - Cloud Native Log Aggregation by Grafana

Filebeat

Docker Hardened Image

Filebeat sends log files to Logstash or directly to Elasticsearch

Tigera Operator

Docker Hardened Image

Kubernetes operator for managing Calico and Calico Enterprise installations.

Rust

Docker Hardened Image

Rust is a systems programming language focused on safety, speed, and concurrency.

Rook Ceph

Docker Hardened Image

Rook Ceph is the Kubernetes operator and helper image for deploying and managing Ceph clusters.

CloudNativePG

Docker Hardened Image

CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.

Harbor Portal

Docker Hardened Image

This project is the web interface for Harbor.

Jenkins

Docker Hardened Image

Jenkins is an open-source automation server that enables developers to build, test, and deploy their software efficiently. It supports continuous integration and continuous deployment (CI/CD) workflows with extensive plugin ecosystem and distributed build capabilities.

Velero

Docker Hardened Image

Velero is an open source tool to safely backup and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

cert-manager-startupapicheck

Docker Hardened Image

A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.

Cert-manager-webhook

Docker Hardened Image

A minimal Cert Manager webhook image

cert-manager-cainjector

Docker Hardened Image

CA injector component cert-manager image

PyTorch

Docker Hardened Image

A python-based machine learning framework, providing tensors, dynamic neural networks and strong GPU acceleration.

OpenTelemetry Collector

Docker Hardened Image

OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives, processes, and exports traces, metrics and logs. It is used as a standalone gateway or as an agent to centralize telemetry collection and forward data to backends such as Prometheus, Tempo, Jaeger, or commercial APMs.

Cilium Operator Generic

Docker Hardened Image

Cluster-wide operator managing Cilium networking and security policies

Caddy

Docker Hardened Image

Fast, multi-purpose web server with automatic HTTPS

Grafana Alloy

Docker Hardened Image

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

Prometheus Config Reloader

Docker Hardened Image

Prometheus Config Reloader for use with Prometheus Operator.

Harbor Trivy Adapter

Docker Hardened Image

Harbor scanner adapter that wraps the Trivy vulnerability scanner to provide a REST API for scanning container images.

KEDA

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

MariaDB

Docker Hardened Image

MariaDB was designed as a drop-in replacement for MySQL® with more features, new storage engines, fewer bugs, and better performance.

Argo CLI

Docker Hardened Image

Argo CLI is a tool to run argo workflow specs

Redis Helm Chart

Docker Hardened Image

Redis is the world's fastest data platform for caching, vector search, and NoSQL databases.

Virt Launcher

Docker Hardened Image

Virt Launcher provides the runtime environment for virtual machines in KubeVirt

Helm

Docker Hardened Image

Helm is the package manager for Kubernetes that helps you manage Kubernetes applications.

Kubernetes Cluster Autoscaler

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

External Secrets Operator Helm chart

Docker Hardened Image

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more

Kyverno

Docker Hardened Image

Kyverno is a Kubernetes-native policy engine for validating, mutating, and generating Kubernetes resources using YAML policies.