SpiceDB

Docker Hardened Image

An open source, Google Zanzibar-inspired database for fine-grained authorization.

Secrets Store CSI Driver

Docker Hardened Image

Mounts secrets, keys, and certificates from external stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault) into Kubernetes pods as files via the CSI volume API.

Calico Whisker Backend

Docker Hardened Image

Backend API service for the Calico Whisker network flow visualization UI.

Tailscale Operator Helm chart

Docker Hardened Image

Helm chart for the Tailscale Kubernetes Operator, which manages Tailscale resources including ingress, egress, subnet routers, and proxies within a cluster.

Calico CSI

Docker Hardened Image

Calico CSI driver for secure connections from Kubernetes pods to local daemons.

Harbor Helm chart

Docker Hardened Image

Harbor - An open source trusted cloud native registry that stores, signs, and scans content

Calico Pod2Daemon FlexVol

Docker Hardened Image

Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.

Tailscale Kubernetes Operator

Docker Hardened Image

Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.

A Prometheus exporter that publishes certificate expirations from disk and Kubernetes secrets

Calico Node Driver Registrar

Docker Hardened Image

CSI node driver registrar repackaged by Calico to register the Calico CSI driver with the kubelet.

ChartMuseum

Docker Hardened Image

An open-source Helm Chart Repository server with support for cloud and local storage backends.

Snyk CLI

Docker Hardened Image

Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code

StackHawk MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.

Stunnel

Docker Hardened Image

stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.

Zscaler MCP Server

Docker Hardened Image

A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.

Kyverno Policies Helm chart

Docker Hardened Image

Kubernetes Pod Security Standards implemented as Kyverno policies.

Amazon EKS Pod Identity Webhook

Docker Hardened Image

The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.