Purveyors

The publishers (Docker Hub / GHCR / quay namespaces) that ship the Community Edition images we track, ranked by security grade across their portfolio. The score is 3 × A-grade count + B-grade count, a signal of consistent high-quality publishing, not just volume. Rebuild cadence (last-90-day push rate), project breadth, and grade distribution are all on the card.

RANK PUBLISHER GRADE DISTRIBUTION PROJECTS · IMAGES REBUILT ≤ 90D AVG SCORE
#1 bitnami A·10 C·1 36 · 36 11 / 36 31% 97.2
#2 library OFFICIAL A·5 F·17 33 · 33 21 / 33 64% 22.9
#3 linuxserver A·5 C·2 D·1 F·9 28 · 28 15 / 28 54% 36.8
#4 grafana A·1 D·1 F·5 9 · 9 5 / 9 56% 26.1
#5 valkey B·1 1 · 2 1 / 2 50% 76.0
#6 jenkins F·2 4 · 4 2 / 4 50% 0.0
#7 hashicorp F·2 3 · 3 1 / 3 33% 0.0
#8 kong F·3 3 · 3 2 / 3 67% 15.7
#9 istio F·7 2 · 9 0 / 9 0% 0.0
#10 confluentinc F·1 2 · 2 1 / 2 50% 0.0
#11 elastic 2 · 2 0 / 2 0% —
#12 atlassian F·1 1 · 8 0 / 8 0% 0.0
#13 ghcr.io/opentofu 1 · 2 0 / 2 0% —
#14 ghcr.io/ferretdb F·2 1 · 2 0 / 2 0% 0.0
#15 openbao 1 · 2 0 / 2 0% —
#16 opensearchproject 1 · 2 0 / 2 0% —
#17 sonatype 1 · 1 0 / 1 0% —
#18 cloudflare 1 · 1 0 / 1 0% —