Catalogue

Hardened, signed, attested. Pick an image to view its SBOM, advisories, and verification snippet.

Image	Latest tag	Signed	SBOM
postgres 17.2 — Hardened PostgreSQL — relational database with full SQL support. Hardened PostgreSQL — relational database with full SQL support.	17.2	yes	yes
redis 7.4.1 — Hardened Redis — in-memory data store and cache. Hardened Redis — in-memory data store and cache.	7.4.1	yes	yes
nginx 1.27.2 — Hardened nginx — HTTP reverse proxy and static web server. Hardened nginx — HTTP reverse proxy and static web server.	1.27.2	yes	yes
node 22.11.0 — Hardened Node.js — JavaScript runtime built on V8. Hardened Node.js — JavaScript runtime built on V8.	22.11.0	yes	yes
python 3.13.0 — Hardened Python — language runtime with stdlib only by default. Hardened Python — language runtime with stdlib only by default.	3.13.0	yes	yes
go 1.23.3 — Hardened Go toolchain — compiler + standard library. Hardened Go toolchain — compiler + standard library.	1.23.3	yes	yes
caddy 2.8.4 — Hardened Caddy — HTTP/2 web server with automatic TLS. Hardened Caddy — HTTP/2 web server with automatic TLS.	2.8.4	yes	yes
busybox 1.37.0 — Hardened BusyBox — minimal shell utilities for diagnostics. Hardened BusyBox — minimal shell utilities for diagnostics.	1.37.0	yes	yes
static latest — Empty scratch base — for distroless static binaries. Empty scratch base — for distroless static binaries.	latest	yes	yes
curl 8.11.0 — Hardened curl — HTTP/HTTPS client for scripts and CI. Hardened curl — HTTP/HTTPS client for scripts and CI.	8.11.0	yes	yes

Catalogue data is a placeholder until the WS2 build pipeline ships its first signed manifests.