regctl

Docker Hardened Image

regctl is a CLI interface for Docker and OCI registries. It provides efficient registry operations without requiring a container runtime, supporting multi-platform images, OCI artifacts, and content manipulation.

Liquibase

Docker Hardened Image

Liquibase is a database schema change management solution that enables you to revise and release database changes faster and safer from development to production.

OpenEBS LVM LocalPV Driver

Docker Hardened Image

OpenEBS LVM LocalPV Driver is a Kubernetes CSI plugin that dynamically provisions persistent volumes backed by LVM2 (Logical Volume Manager), providing local storage where the device, volume, and application are on the same host.

K8ssandra Medusa

Docker Hardened Image

Apache Cassandra backup and restore tool

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

yourls

Docker Official Image

YOURLS is a set of PHP scripts that will allow you to run Your Own URL Shortener.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

portainer/agent

Portainer.io

Connect your Kubernetes, Docker and Podman environments to Portainer.

Hubble UI Backend

Docker Hardened Image

Backend API server for Cilium Hubble UI

amazon/aws-xray-daemon

Amazon Web Services

The AWS X-Ray daemon gathers raw segment data and relays it to the AWS X-Ray API.

Vault CSI Provider

Docker Hardened Image

vault-csi-provider is HashiCorp's official Kubernetes integration that securely mounts Vault secrets as files in pod containers using the Container Storage Interface, enabling applications to access centralized secrets without code changes or embedded credentials.

varnish

Docker Official Image

Varnish is an HTTP accelerator designed for content-heavy dynamic web sites as well as APIs.

portainer/portainer-ce

Portainer.io

Portainer CE - a lightweight service delivery platform for containerized applications

amazon/aws-cli

Amazon Web Services

Universal Command Line Interface for Amazon Web Services

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

lacework/datacollector

Lacework Inc

Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.

Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

Netdata

Docker Hardened Image

Real-time performance monitoring for systems and applications with zero configuration.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus

VictoriaMetrics VMAlert

Docker Hardened Image

VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

Knative Serving Activator

Docker Hardened Image

Buffers and routes requests for scaled-to-zero Knative Services. The activator is a data-plane component of Knative Serving. It receives requests for Revisions that have no available pods, reports load to the autoscaler, and forwards traffic once capacity is ready.

ORAS

Docker Hardened Image

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

Knative Serving Controller

Docker Hardened Image

Reconciles Knative Serving resources into running Kubernetes workloads. The controller is a control-plane component of Knative Serving. It watches Services, Configurations, Routes, and Revisions and reconciles them into the underlying Deployments, autoscaling resources, and networking objects that run and route serverless workloads.

kubernetes-pause

Docker Hardened Image

kubernetes-pause is the minimal Kubernetes infrastructure container used to hold a pod's shared namespaces.

GitLab Toolbox

Docker Hardened Image

GitLab Toolbox provides the backup, restore, and Rails maintenance tooling (backup-utility, gitlab-rake, gitlab-rails) for a GitLab installation.

piwik

Docker Official Image

DEPRECATED; use "matomo" instead