128 CE projects · scanned hourly · open rubric

Which Docker image
should I pull?

ce.rodeo ranks every Community Edition Docker image for 128 open-source projects by security, project health, and the community. Grades decompose to arithmetic you can audit — no black boxes.

A Scout — security grade for this image right now A Pulse — project health: still shipping, maintained, in use

PROJECTS INDEXED

128

COMBINED PULLS

160.7B

PULSE SCORED

108 of 128

PULSE A/B

Trusted publishers

Full leaderboard →

cgr.dev/chainguard

A·10

13 projects · 13 images
10/13 rebuilt in 90 days

readystack

A·5 F·4

18 projects · 33 images
10/33 rebuilt in 90 days

linuxserver

A·10 B·3 C·7 F·36

28 projects · 521 images
215/521 rebuilt in 90 days

hashicorp

A·9 F·25

3 projects · 51 images
10/51 rebuilt in 90 days

The Index

sorted by pulls ↓

PROJECT CATEGORY · TAGS SCOUT PULSE PULLS UPVOTES

Nginx Official build of Nginx. top: Chainguard · cgr.dev/chainguard/nginx:latest A · pushed today web-proxy role:load-balancerrole:reverse-proxyrole:web-server +4 A D 13.4B 0

Memcached Free & open source, high-performance, distributed memory object caching system. top: Docker Official · memcached F · pushed 4d ago databases role:cachestack:self-hostedstack:single-binary +2 F F 13.4B 0

Istio This image is used for Istio samples. top: istio · istio/proxy F role:service-meshstack:cloud-nativelic:Apache-2.0 +1 F C 12.5B 0

Postgres The PostgreSQL object-relational database system provides reliability and data integrity. top: Chainguard · cgr.dev/chainguard/postgres:latest A · pushed today databases role:document-dbrole:ftsrole:oltp +7 A B 11.8B 1

Python Python is an interpreted, interactive, object-oriented, open-source programming language. top: Chainguard · cgr.dev/chainguard/python:latest A · pushed yesterday runtime role:language-runtimestack:single-binarylic:PSF-2.0 +1 A A 9.3B 0

Nodejs Node.js is a JavaScript-based platform for server-side and networking applications. top: Chainguard · cgr.dev/chainguard/node:latest A · pushed today runtime role:language-runtimestack:single-binarylic:MIT +1 A A 7.1B 0

Kubectl Bitnami Secure Image for kubectl role:container-orchestrationstack:single-binarylic:Apache-2.0 +1 — B 5.4B 0

Grafana Bitnami Secure Image for grafana top: grafana · grafana/grafana F · pushed 11d ago observability role:metricsrole:observabilityrole:visualization +7 F B 5.3B 0

Mysql MySQL is a widely used, open-source relational database management system (RDBMS). top: readystack · readystack/mysql:9.7.2-CE-ubuntu24.04-r1 A · pushed 2mo ago databases role:oltprole:relational-dbalt:aurora +4 A C 5.2B 0

Jenkins DEPRECATED; use "jenkins/jenkins:lts" instead top: Docker Official · jenkins A ci-cd role:ci-cdalt:circlecialt:github-actions +4 A D 5.0B 0

Loki Loki - Cloud Native Log Aggregation by Grafana top: readystack · readystack/loki:v3.7.8-CE-ubuntu24.04-r1 A · pushed 4d ago observability role:logsrole:observabilityalt:datadog +6 A B 4.8B 0

Apache Httpd apache-httpd The Apache HTTP Server Project top: Docker Official · httpd F · pushed 4d ago web-proxy role:reverse-proxyrole:web-serverstack:self-hosted +2 F F 4.7B 0

Rabbitmq RabbitMQ is an open source multi-protocol messaging broker. top: Docker Official · rabbitmq F · pushed 8d ago messaging role:message-queuestack:self-hostedlic:MPL-2.0 +1 F C 3.9B 0

Docker Docker in Docker! (commonly known as "dind") top: Docker Official · docker B · pushed yesterday role:container-orchestrationstack:self-hostedlic:Apache-2.0 +1 B B 3.6B 0

Mariadb MariaDB Server is a high performing open source relational database, forked from MySQL. top: linuxserver · linuxserver/mariadb:11.8.8-r0-ls234 A · pushed 3d ago databases role:oltprole:relational-dbalt:aurora +4 A D 3.2B 0

OpenSearch Apache-licensed Elasticsearch fork maintained by AWS and the OpenSearch Foundation. Full-text search and log analytics. top: opensearchproject · opensearchproject/opensearch:latest F · pushed 17d ago databases role:ftsrole:logsrole:search +5 F F 3.2B 0

Promtail grafana/promtail top: grafana · grafana/promtail F · pushed 7mo ago role:agentrole:logsrole:observability +4 F D 2.9B 0

Golang Go (golang) is a general purpose, higher-level, imperative programming language. top: Chainguard · cgr.dev/chainguard/go:latest A · pushed today runtime role:language-runtimestack:single-binarylic:BSD-3-Clause +1 A B 2.7B 0

Radarr A Radarr container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/radarr:6.4.4.10685-ls319 F · pushed 5d ago media role:media-automationrole:media-indexerstack:self-hosted +2 F D 2.4B 0

Sonarr A Sonarr container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/sonarr F · pushed 14d ago media role:media-automationrole:media-indexerstack:self-hosted +2 D D 2.4B 0

Registry Distribution implementation for storing and distributing of container images and artifacts top: readystack · readystack/registry:v3.1.2-CE-ubuntu24.04-r1 A · pushed 16d ago role:artifact-registryrole:container-registrystack:cloud-native +3 A D 1.8B 0

Airflow apache/airflow Apache Airflow top: apache · apache/airflow F · pushed 23d ago F F 1.6B 0

Ruby Ruby is a dynamic, reflective, object-oriented, general-purpose, open-source programming language. top: Chainguard · cgr.dev/chainguard/ruby:latest A · pushed today runtime role:language-runtimestack:single-binarylic:BSD-2-Clause +1 A B 1.6B 0

Jackett A Jackett container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/jackett A · pushed yesterday media role:media-indexerstack:self-hostedlic:GPL-2.0 +1 A C 1.6B 0

Wordpress The WordPress rich content management system can utilize plugins, widgets, and themes. top: Docker Official · wordpress F · pushed 2d ago applications role:blogrole:cmsrole:e-commerce +7 F B 1.5B 0

PHP While designed for web development, the PHP scripting language also provides general-purpose use. top: Chainguard · cgr.dev/chainguard/php:latest A · pushed today runtime role:language-runtimestack:single-binarylic:PHP-3.01 +1 A A 1.4B 0

Sonarqube Official images for SonarQube, code analysis tool for code quality and security top: Docker Official · sonarqube F · pushed 8d ago ci-cd role:code-qualityrole:saststack:self-hosted +2 F D 1.2B 0

Haproxy HAProxy - The Reliable, High Performance TCP/HTTP Load Balancer top: Docker Official · haproxy:3.2.25-alpine3.24 B · pushed 6d ago web-proxy role:load-balancerrole:reverse-proxystack:self-hosted +2 B D 1.1B 0

External DNS external-dns Bitnami Secure Image for external-dns role:dnsstack:cloud-nativelic:Apache-2.0 +1 — F 1.1B 0

Synthetic Monitoring Agent grafana/synthetic-monitoring-agent Blackbox Exporter agent which executes checks for the Grafana Cloud Synthetic Monitoring service. top: grafana · grafana/synthetic-monitoring-agent F · pushed 3d ago D F 1.0B 0

PI Hole pi-hole The official Pi-hole Docker image from pi-hole.net top: pihole · pihole/pihole F · pushed 20d ago applications F F 993.6M 0

Tautulli top: linuxserver · linuxserver/tautulli A · pushed yesterday media role:media-serverrole:observabilitystack:self-hosted +2 A F 989.8M 0

Ombi An Ombi container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/ombi:v4.53.10-ls271 C · pushed 6d ago media role:media-automationstack:self-hostedlic:GPL-3.0 +1 C D 972.9M 0

Kong Gateway kong/kong-gateway Kong Gateway Enterprise - The world’s most popular API gateway. top: kong · kong/kong-gateway F · pushed 1mo ago role:api-gatewaystack:cloud-nativestack:self-hosted +2 F F 925.7M 0

Grafana Image Renderer grafana/grafana-image-renderer top: grafana · grafana/grafana-image-renderer:v5.12.6 F · pushed yesterday F F 899.3M 0

Tomcat Apache Tomcat is an open source implementation of the Java Servlet and JavaServer Pages technologies top: Docker Official · tomcat A · pushed 4d ago A D 828.1M 0

Nzbget An Nzbget container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/nzbget A · pushed 7d ago media role:download-clientstack:self-hostedlic:GPL-2.0 +1 A F 809.7M 0

Maven Apache Maven is a software project management and comprehension tool. top: Docker Official · maven:3.10.0-eclipse-temurin-25-noble A · pushed yesterday role:package-managerstack:single-binarylic:Apache-2.0 +1 A D 777.1M 0

Sabnzbd A Sabnzbd container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/sabnzbd F · pushed 2d ago media role:download-clientstack:self-hostedlic:GPL-2.0 +1 F F 719.7M 0

Heimdall top: linuxserver · linuxserver/heimdall:v2.8.3-ls366 F · pushed today role:dashboardstack:self-hostedlic:MIT +1 F F 588.2M 0

Lidarr top: linuxserver · linuxserver/lidarr F · pushed 3d ago media role:media-automationrole:media-indexerstack:self-hosted +2 F F 569.2M 0

Transmission A Transmission container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/transmission:4.1.3-r0-ls363 C · pushed 10d ago media role:download-clientstack:self-hostedlic:GPL-2.0 +2 C F 537.5M 0

Inbound Agent jenkins/inbound-agent This is an image for Jenkins agents using TCP or WebSockets to establish inbound connection to the J top: jenkins · jenkins/inbound-agent F · pushed 2mo ago F F 507.7M 0

Valkey Linux Foundation OSI-licensed Redis fork. In-memory data store, Redis-protocol compatible, BSD-3 licensed. top: Chainguard · cgr.dev/chainguard/valkey:latest A · pushed yesterday databases role:cacherole:key-value-storerole:pub-sub +4 A F 500.0M 0

Bazarr top: linuxserver · linuxserver/bazarr:v1.6.2-ls367 F · pushed 3d ago media role:media-automationstack:self-hostedlic:GPL-3.0 +1 F F 477.1M 0

Agent grafana/agent top: grafana · grafana/agent F · pushed 7mo ago F F 472.5M 0

Fluent BIT Plugin Loki grafana/fluent-bit-plugin-loki top: grafana · grafana/fluent-bit-plugin-loki F · pushed 22d ago F F 441.6M 0

Jellyfin No longer offered by ReadyStack: unsupported, no security updates. See readystack.dev/products.html top: jellyfin · jellyfin/jellyfin:12.2-arm64.20261005-225228 F · pushed 4d ago media F C 429.9M 0

Letsencrypt A Letsencrypt nginx container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/letsencrypt:205 · pushed 7.7y ago role:identitystack:self-hostedlic:MIT +1 — D 412.2M 0

Kubernetes Ingress Controller kong/kubernetes-ingress-controller Use Kong for Kubernetes Ingress top: kong · kong/kubernetes-ingress-controller F · pushed 2mo ago F F 402.6M 0

Ghost Publish by web and email newsletter, with member signups and subscription payments. top: Docker Official · ghost F · pushed 2d ago applications F A 380.9M 0

Kafka Bitnami Secure Image for kafka top: confluentinc · confluentinc/cp-kafka F · pushed 1mo ago messaging role:message-queuerole:stream-processingstack:self-hosted +2 F C 365.4M 0

Hydra2 top: linuxserver · linuxserver/hydra2 F · pushed 6.5y ago F D 359.2M 0

Solr Solr is the blazing-fast, open source, multi-modal search platform built on Apache Lucene. top: Docker Official · solr:9.11.0-slim F · pushed 3d ago databases F D 357.1M 0

Qbittorrent A Qbittorrent container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/qbittorrent F · pushed 11d ago F D 345.4M 0

Server vaultwarden/server Alternative implementation of the Bitwarden server API in Rust, including the Web Vault. top: vaultwarden · vaultwarden/server:1.37.4-alpine A · pushed 4d ago A F 340.7M 0

Zookeeper Bitnami Secure Image for zookeeper top: confluentinc · confluentinc/cp-zookeeper F · pushed 1.5y ago F F 337.3M 0

Deluge A Deluge container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/deluge:2.2.0-libtorrentv1 B · pushed 4d ago A F 333.0M 0

Neo4j Neo4j is a highly scalable, robust native graph database. top: Docker Official · neo4j F · pushed 4d ago databases F D 325.6M 0

Nextcloud A Nextcloud container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/nextcloud F · pushed 3d ago applications F B 325.4M 0

Nginx Proxy Manager jc21/nginx-proxy-manager Docker container for managing Nginx proxy hosts with a simple, powerful interface top: jc21 · jc21/nginx-proxy-manager F · pushed 16d ago F F 283.0M 0

Metabase metabase/metabase Metabase Open-source Edition Docker image. top: metabase · metabase/metabase:v0.64.1.x A · pushed today A — 274.9M 0

Cassandra Apache Cassandra is an open-source distributed storage system. top: Docker Official · cassandra:4.1.12-bookworm F · pushed 4d ago databases F D 271.7M 0

Minideb Bitnami Secure Image for minideb — — 271.3M 0

N8N No longer offered by ReadyStack: unsupported, no security updates. See readystack.dev/products.html top: n8nio · n8nio/n8n:2.43.3-17f9c4a F · pushed yesterday applications F C 268.5M 0

Perl Perl is a high-level, general-purpose, interpreted, dynamic programming language. top: Docker Official · perl:5.45.3-slim-threaded-trixie F · pushed 2d ago F C 255.5M 0

Nats NATS is an open-source, high-performance, cloud native messaging system. top: Docker Official · nats A · pushed 22d ago messaging A B 254.0M 0

Lazylibrarian A lazylibrarian container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/lazylibrarian A · pushed yesterday A F 242.7M 0

Percona Percona Server is a fork of the MySQL relational database management system created by Percona. top: Docker Official · percona:8.0.46-37-centos F · pushed 3d ago F D 239.4M 0

Cloudflared cloudflare/cloudflared Client for Cloudflare Tunnel, a daemon that exposes private services through the Cloudflare edge. top: cloudflare · cloudflare/cloudflared:1966-18cdfe0a6fc7 D · pushed 4d ago D D 231.6M 0

Kibana Kibana gives shape to any kind of data — structured and unstructured — indexed in Elasticsearch. top: Docker Official · kibana:9.4.8 F · pushed 3d ago F C 224.6M 0

Syncthing A Syncthing container, brought to you by LinuxServer.io. top: readystack · readystack/syncthing:v2.1.5-CE-ubuntu24.04-r1 A · pushed 1mo ago A C 209.7M 0

Drupal Drupal is an open source content management platform powering millions of websites and applications. top: Docker Official · drupal:10.6.18-php8.3-fpm-alpine3.23 C · pushed 11d ago C F 209.5M 0

Couchdb CouchDB is a database that uses JSON for documents, an HTTP API, & JavaScript/declarative indexing. top: Docker Official · couchdb:3.4.3-nouveau F · pushed 4d ago databases F F 206.3M 0

Calibre WEB calibre-web A Calibre-Web container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/calibre-web:0.6.27-ls404 F · pushed 6d ago F F 203.0M 0

Nexus Sonatype Nexus Repository 3 top: sonatype · sonatype/nexus3 F · pushed 10d ago F F 202.7M 0

Logstash Logstash is a tool for managing events and logs. top: Docker Official · logstash:8.19.23 F · pushed 3d ago F F 202.5M 0

Adguard Home adguard-home Network-wide ads & trackers blocking DNS server top: adguard · adguard/adguardhome F · pushed 2mo ago F F 194.5M 0

Drone Drone is a Continuous Integration platform built on Docker top: drone · drone/drone F · pushed 6mo ago ci-cd F F 188.4M 0

Redis Sentinel redis-sentinel Bitnami Secure Image for redis-sentinel — — 183.7M 0

Duplicati A Duplicati container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/duplicati:2.4.0 F · pushed 2d ago F — 182.4M 0

TFC Agent hashicorp/tfc-agent Terraform Cloud Agent top: hashicorp · hashicorp/tfc-agent A · pushed 10d ago A — 176.6M 0

Redis Exporter redis-exporter Bitnami Secure Image for redis-exporter — — 170.7M 0

Consul Template hashicorp/consul-template Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault. top: hashicorp · hashicorp/consul-template:0.43.0 F · pushed 29d ago F F 155.2M 0

Rutorrent A Rutorrent container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/rutorrent F · pushed 5.5y ago F — 154.3M 0

Loki Canary grafana/loki-canary top: grafana · grafana/loki-canary:3.7.8 F · pushed 22d ago F F 152.7M 0

OpenTofu Linux Foundation OSS Terraform fork. MPL-2.0 licensed, drop-in Terraform-compatible. top: GHCR · opentofu · ghcr.io/opentofu/opentofu:latest F · pushed 8d ago ci-cd role:infrastructure-as-codestack:single-binarylic:MPL-2.0 +1 F F 150.0M 0

Couchpotato A CouchPotato container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/couchpotato F · pushed 4.6y ago F — 149.8M 0

Kube Bench aquasec/kube-bench Use this container to install the kube-bench go application on your host. top: aquasec · aquasec/kube-bench F · pushed 2mo ago F F 147.9M 0

Metrics Bitnami Secure Image for metrics-server — — 146.6M 0

Java DEPRECATED; use "openjdk" (or other JDK implementations) instead top: Docker Official · java:9-b149-jre · pushed 9.8y ago — F 143.2M 0

Etcd Bitnami Secure Image for etcd top: readystack · readystack/etcd:v3.7.2-CE-ubuntu24.04-r1 A · pushed 17d ago A B 139.7M 0

Ubooquity A Ubooquity container, brought to you by LinuxServer.io. top: linuxserver · linuxserver/ubooquity F · pushed 3d ago F F 135.6M 0

Trivy aquasec/trivy Trivy is an all-in-one, cloud native security scanner top: aquasec · aquasec/trivy B · pushed 8d ago B F 127.6M 0

Sentry DEPRECATED; https://develop.sentry.dev/self-hosted/ top: Docker Official · sentry:9.1.2-onbuild F · pushed 7.0y ago F F 124.7M 0

Jnlp Agent Maven jenkins/jnlp-agent-maven A JNLP-based agent with Maven 3 built in top: jenkins · jenkins/jnlp-agent-maven F · pushed 5.7y ago F — 119.5M 0

Http Echo hashicorp/http-echo http-echo is an in-memory web server that echos back the arguments given to it. top: hashicorp · hashicorp/http-echo:0.2.3 A · pushed 9.4y ago A F 113.4M 0

Jnlp Slave jenkins/jnlp-slave a Jenkins agent which can connect to Jenkins using JNLP4 or Websocket protocols top: jenkins · jenkins/jnlp-slave F · pushed 4.1y ago F — 111.9M 0

Tempo top: grafana · grafana/tempo:3.1.0 A · pushed 10d ago observability A — 109.6M 0

Atlassian Base image for Bamboo Agents. top: atlassian · atlassian/agent-setup-git F · pushed 10.3y ago F F 107.0M 0

Which Docker imageshould I pull?

Trusted publishers

The Index

Which Docker image
should I pull?