Gitleaks

Docker Hardened Image

Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.

Netdata

Docker Hardened Image

Real-time performance monitoring for systems and applications with zero configuration.

JupyterHub K8s Hub

Docker Hardened Image

JupyterHub hub component for Zero to JupyterHub on Kubernetes, with Kubespawner and authenticators.

Kustomize

Docker Hardened Image

Kustomize lets you customize raw, template-free YAML files for Kubernetes configurations.

Jenkins Agent

Docker Hardened Image

Jenkins Agent is a base image for Docker that includes Java and the Jenkins agent executable (agent.jar). This executable is an instance of the Jenkins Remoting library and enables distributed build capabilities for Jenkins controllers.

dynatrace/oneagent

Dynatrace

Non-immutable installer image for Dynatrace OneAgent

A Prometheus exporter that receives access logs from nginx through the syslog protocol and converts them into metrics.

APISIX

Docker Hardened Image

Apache APISIX is a dynamic, real-time, high-performance API Gateway.

Certbot

Docker Hardened Image

EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.

almalinux

Docker Official Image

The official build of AlmaLinux OS.

Polaris

Docker Hardened Image

Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.

iojs

Docker Official Image

DEPRECATED; use "node" instead

Confluent Platform ZooKeeper

Docker Hardened Image

Apache ZooKeeper packaged for Confluent Platform, configured through ZOOKEEPER_* environment variables by the Confluent container launch scripts.

node-collector

Docker Hardened Image

node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.

Velero Helm chart

Docker Hardened Image

Velero is an open source tool to safely back up and restore, perform disaster recovery, and migrate Kubernetes cluster resources and persistent volumes.

julia

Docker Official Image

Julia is a high-level, high-performance dynamic programming language for technical computing.

OpenSearch Helm chart

Docker Hardened Image

OpenSearch is a distributed, RESTful search and analytics engine designed for a wide range of use cases.

Grafana Tempo Helm chart

Docker Hardened Image

High-volume, cost-effective distributed tracing backend that stores traces directly in object storage.

nginx/nginx-ingress

NGINX Inc.

NGINX and NGINX Plus Ingress Controllers for Kubernetes

Docker Scout CLI

Docker Hardened Image

Command-line interface for Docker Scout providing container image analysis, vulnerability scanning, and policy evaluation capabilities for securing your software supply chain.

Azure Metrics Exporter

Docker Hardened Image

Azure Monitor metrics exporter for Prometheus

NATS Server Config Reloader

Docker Hardened Image

A sidecar utility that watches for NATS configuration file changes and triggers server reloads.

Prometheus Adapter

Docker Hardened Image

Prometheus Adapter implements the custom.metrics.k8s.io and external.metrics.k8s.io APIs for Kubernetes HPA and VPA, exposing metrics from Prometheus.

Telegraf

Docker Hardened Image

Telegraf is a plugin-driven server agent for collecting and reporting metrics.

ClickHouse Operator

Docker Hardened Image

Altinity's Kubernetes operator for managing ClickHouse clusters.

MetalLB Controller

Docker Hardened Image

MetalLB controller component manages IP address allocations for LoadBalancer services on bare metal Kubernetes clusters.

MySQL Server Exporter

Docker Hardened Image

A Prometheus exporter for MySQL Server (mysqld_exporter) exposing server status and performance metrics.

Kyverno Policy Reporter UI

Docker Hardened Image

The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI

orientdb

Docker Official Image

OrientDB a Multi-Model Open Source NoSQL DBMS that combines graphs and documents.