GitLab Runner

Docker Hardened Image

GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab.

grafana/loki

Grafana Labs

Loki - Cloud Native Log Aggregation by Grafana

Argo Events

Docker Hardened Image

Argo Events is an event-driven Workflow Automation Framework

Virt Export Proxy

Docker Hardened Image

Virt Export Proxy provides a proxy endpoint for exporting virtual machine volumes in KubeVirt

amazon/aws-for-fluent-bit

Amazon Web Services

Fluent Bit image with plugins for AWS

Karpenter

Docker Hardened Image

karpenter is an efficient node manager for kubernetes clusters

AWS EFS CSI Driver

Docker Hardened Image

The AWS EFS CSI driver provides Container Storage Interface (CSI) support for Amazon EFS file systems in Kubernetes clusters. It enables dynamic and static provisioning of EFS volumes.

Argo CD Image Updater Helm chart

Docker Hardened Image

A tool to automatically update container images of Kubernetes workloads managed by Argo CD.

Velero Plugin for AWS

Docker Hardened Image

Plugin to support running Velero on AWS.

DataHub Ingestion

Docker Hardened Image

DataHub metadata ingestion CLI for emitting metadata from data sources, BI tools, and data warehouses into DataHub.

DataHub Actions

Docker Hardened Image

Event-driven framework that reacts to real-time changes in DataHub's metadata graph by polling Kafka topics and invoking pluggable actions (Slack/Teams notifications, doc/tag propagation, executor for UI-triggered ingestion).

Harbor Core

Docker Hardened Image

Harbor Core is the main API server component of Harbor, an open source trusted cloud native registry project that stores, signs, and scans content.

Argo Rollouts

Docker Hardened Image

Argo Rollouts is a Kubernetes controller and set of CRDs which provide advanced deployment capabilities

notation

Docker Hardened Image

Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.

AWS EBS CSI Driver

Docker Hardened Image

The AWS EBS CSI driver provides Container Storage Interface (CSI) support for Amazon EBS volumes in Kubernetes clusters. It enables dynamic and static provisioning, volume snapshots, and volume resizing.

SonarQube

Docker Hardened Image

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.

Kubectl Argo Rollouts Controller

Docker Hardened Image

CLI and Dashboard for the Argo Rollouts Kubernetes controller

portainer/agent

Portainer.io

Connect your Kubernetes, Docker and Podman environments to Portainer.

portainer/portainer-ce

Portainer.io

Portainer CE - a lightweight service delivery platform for containerized applications

Klipper Helm

Docker Hardened Image

Shell entrypoint and Helm plugins used by the K3s and RKE2 built-in Helm controller job image.

Flux CLI

Docker Hardened Image

Flux is a tool for keeping Kubernetes clusters in sync with sources of configuration and automating updates to configuration when there is new code to deploy.

lacework/datacollector

Lacework Inc

Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.

Image Automation Controller

Docker Hardened Image

Flux CD component that automates container image updates by committing image tag changes back to Git repositories when new image versions are detected.

Image Reflector Controller

Docker Hardened Image

Flux CD component that scans container image repositories and reflects discovered image tags into Kubernetes resources, enabling policy-driven image tag selection for automated updates.

Gatekeeper

Docker Hardened Image

Policy Controller for Kubernetes, built on Open Policy Agent.

dynatrace/dynatrace-operator

Dynatrace

Automate Kubernetes observability with Dynatrace

nginxinc/nginx-unprivileged

NGINX Inc.

Unprivileged NGINX Dockerfiles

dynatrace/oneagent

Dynatrace

Non-immutable installer image for Dynatrace OneAgent

Trigger.dev

Docker Hardened Image

Self-hosted Trigger.dev webapp: an open-source background jobs and AI workflow platform for TypeScript, running on Postgres with optional Redis and ClickHouse.