JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

GitLab Runner Helper

Docker Hardened Image

GitLab Runner Helper handles git operations, artifact upload/download, and cache management for GitLab CI/CD jobs.

Unleash

Docker Hardened Image

Unleash is an open-source feature flag management platform.

VictoriaMetrics VMAgent

Docker Hardened Image

VictoriaMetrics VMAgent is an agent that helps you collect metrics from various sources, relabel and filter the collected metrics and store them in VictoriaMetrics.

Prometheus NATS Exporter

Docker Hardened Image

A Prometheus exporter for NATS metrics, exposing server monitoring information including connections, subscriptions, routes, and JetStream statistics.

VictoriaMetrics VMStorage

Docker Hardened Image

VictoriaMetrics VMStorage is the ingestion component for a VictoriaMetrics cluster.

Percona XtraBackup

Docker Hardened Image

Percona XtraBackup is an open-source hot backup utility for MySQL that performs non-blocking backups for InnoDB, XtraDB, and MyISAM databases.

trust-manager

Docker Hardened Image

cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters

MetalLB Speaker

Docker Hardened Image

MetalLB speaker component announces LoadBalancer services to the network using Layer 2 ARP or BGP routing protocols on bare metal Kubernetes clusters.

GitLab Sidekiq

Docker Hardened Image

GitLab Sidekiq runs the background job processor for the GitLab Rails application, handling asynchronous work such as email delivery, repository operations, and CI/CD tasks.

Nessie

Docker Hardened Image

Project Nessie is a Transactional Catalog for Data Lakes with Git-like semantics.

Prometheus Operator Admission Webhook

Docker Hardened Image

Kubernetes webhook for managing Prometheus.

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

K8ssandra Medusa

Docker Hardened Image

Apache Cassandra backup and restore tool

regctl

Docker Hardened Image

regctl is a CLI interface for Docker and OCI registries. It provides efficient registry operations without requiring a container runtime, supporting multi-platform images, OCI artifacts, and content manipulation.

OpenEBS LVM LocalPV Driver

Docker Hardened Image

OpenEBS LVM LocalPV Driver is a Kubernetes CSI plugin that dynamically provisions persistent volumes backed by LVM2 (Logical Volume Manager), providing local storage where the device, volume, and application are on the same host.

Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

Liquibase

Docker Hardened Image

Liquibase is a database schema change management solution that enables you to revise and release database changes faster and safer from development to production.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

Socket CLI

Docker Hardened Image

Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.

Hubble UI Backend

Docker Hardened Image

Backend API server for Cilium Hubble UI

Vault CSI Provider

Docker Hardened Image

vault-csi-provider is HashiCorp's official Kubernetes integration that securely mounts Vault secrets as files in pod containers using the Container Storage Interface, enabling applications to access centralized secrets without code changes or embedded credentials.

Apache HTTP Server

Docker Hardened Image

The Apache HTTP Server (httpd) is a robust, extensible, and widely used web server for serving static and dynamic content. This Docker Hardened Image provides a minimal, non-root runtime of Apache HTTP Server suitable for production deployments.

Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

Netdata

Docker Hardened Image

Real-time performance monitoring for systems and applications with zero configuration.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

VictoriaMetrics VMAlert

Docker Hardened Image

VictoriaMetrics VMAlert is a alerting and recording rules evaluation component for VictoriaMetrics.

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.