External Secrets Operator Helm chart

Docker Hardened Image

External Secrets Operator is a Kubernetes operator that integrates external secret management systems like AWS Secrets Manager, HashiCorp Vault, Google Secrets Manager, Azure Key Vault, IBM Cloud Secrets Manager, Akeyless, CyberArk Secrets Manager, Pulumi ESC and many more

Redis Exporter

Docker Hardened Image

A Prometheus exporter for monitoring Redis and Valkey servers, exposing metrics for memory usage, key counts, connections, and replication status.

curl

Docker Hardened Image

command line tool and library for transferring data with URLs

Cosign

Docker Hardened Image

Cosign supports container signing, verification, and storage in an OCI registry. Written in Go, it aims to make signatures invisible infrastructure.

Tigera Operator

Docker Hardened Image

Kubernetes operator for managing Calico and Calico Enterprise installations.

CloudNativePG

Docker Hardened Image

CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication.

Rust

Docker Hardened Image

Rust is a systems programming language focused on safety, speed, and concurrency.

Grafana Loki

Docker Hardened Image

Loki - Cloud Native Log Aggregation by Grafana

Rook Ceph

Docker Hardened Image

Rook Ceph is the Kubernetes operator and helper image for deploying and managing Ceph clusters.

Filebeat

Docker Hardened Image

Filebeat sends log files to Logstash or directly to Elasticsearch

Grafana Alloy

Docker Hardened Image

Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines

cert-manager-startupapicheck

Docker Hardened Image

A small cert-manager CLI utility that verifies the cert-manager API and components have started correctly. Primarily used as a Kubernetes Job during installation or upgrades to validate cert-manager readiness.

cert-manager-cainjector

Docker Hardened Image

CA injector component cert-manager image

Cert-manager-webhook

Docker Hardened Image

A minimal Cert Manager webhook image

Harbor Portal

Docker Hardened Image

This project is the web interface for Harbor.

Cilium Operator Generic

Docker Hardened Image

Cluster-wide operator managing Cilium networking and security policies

Jenkins

Docker Hardened Image

Jenkins is an open-source automation server that enables developers to build, test, and deploy their software efficiently. It supports continuous integration and continuous deployment (CI/CD) workflows with extensive plugin ecosystem and distributed build capabilities.

OpenTelemetry Collector

Docker Hardened Image

OpenTelemetry Collector is a vendor-agnostic telemetry pipeline that receives, processes, and exports traces, metrics and logs. It is used as a standalone gateway or as an agent to centralize telemetry collection and forward data to backends such as Prometheus, Tempo, Jaeger, or commercial APMs.

MariaDB

Docker Hardened Image

MariaDB was designed as a drop-in replacement for MySQL® with more features, new storage engines, fewer bugs, and better performance.

KEDA

Docker Hardened Image

KEDA is an open-source project that enables event-driven autoscaling for Kubernetes workloads.

Harbor Trivy Adapter

Docker Hardened Image

Harbor scanner adapter that wraps the Trivy vulnerability scanner to provide a REST API for scanning container images.

Prometheus Config Reloader

Docker Hardened Image

Prometheus Config Reloader for use with Prometheus Operator.

PyTorch

Docker Hardened Image

A python-based machine learning framework, providing tensors, dynamic neural networks and strong GPU acceleration.

Caddy

Docker Hardened Image

Fast, multi-purpose web server with automatic HTTPS

Kubernetes Cluster Autoscaler

Docker Hardened Image

Cluster Autoscaler is a tool that automatically adjusts the size of the Kubernetes cluster.

Docker Sandboxes Agent Templates

Docker Hardened Image

Docker Sandboxes Agent Templates (SBX) images for AI coding agents

Bun

Docker Hardened Image

Bun is a fast, modern JavaScript runtime.

Argo CLI

Docker Hardened Image

Argo CLI is a tool to run argo workflow specs

Reloader Helm Chart

Docker Hardened Image

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig

Docker dind

Docker Hardened Image

Docker-in-Docker (dind) runs a full Docker Engine inside a container so you can build and run containers within a container, for CI pipelines and nested workloads.