dhi.io/argocd-image-updater
Argo CD Image Updater
A tool to automatically update container images of Kubernetes workloads managed by Argo CD.
pushed 8 hours ago
linux/amd64, linux/arm64
131.69 MB
for linux/amd64
376
for linux/amd64
Active support
-
Build Level 3
Tamper-evident proof of how and from what sources this image was built. Build Level 3 is the highest the SLSA build track defines.
CycloneDX SBOM + SPDX SBOM
A software bill of materials in both CycloneDX and SPDX formats so it drops straight into your existing tooling. Audit exactly what you're shipping.
A Vulnerability Exploitability exchange document, Docker's assessment of which CVEs actually affect this image and which don't apply, so you can focus on real risk instead of chasing false positives.
Available
A link to everything used to build the image, package source code, Git repos, and build files, so you can audit or reproduce the build and stay compliant with open source licenses.
Every known vulnerability in this image, shown in full rather than hidden. The VEX data flags which ones actually apply, so you can tell real exposure from noise before you ship.
Exactly what changed in this build, down to the package bumps and fixes behind the version you're pulling.
Verifies no keys, tokens, or credentials were accidentally baked into the image.
The image layers were scanned for known malware signatures before publishing.
About Argo CD Image Updater
Argo CD Image Updater is a Kubernetes controller that automatically updates container images of applications managed by Argo CD. It monitors container registries for new versions and updates applications according to configurable policies.
Key features include:
- Automatic image updates: Continuously monitors registries and updates applications with new versions
- Multiple update strategies: Support for semantic versioning, digest-based updates, and latest tag tracking
- Git write-back: Write image updates back to Git repositories for full GitOps workflows
- Multi-registry support: Works with Docker Hub, ECR, GCR, ACR, Harbor, Quay, and other registries
- Webhook integration: Receive immediate notifications from registries for faster updates
- Flexible configuration: Per-application configuration via Argo CD Application annotations
Advanced capabilities:
- Version constraint support with semantic versioning rules
- Registry authentication with multiple credential types
- Direct parameter override or Git commit-based updates
- Argo CD ApplicationSet support
- Prometheus metrics and health endpoints
- GPG commit signing for Git write-back
About Docker Hardened Images
Docker Hardened Images (DHI) are secure, minimal container images with near-zero CVEs, signed provenance, and complete SBOM/VEX metadata. They provide a secure foundation for production workloads.
Why use Docker Hardened Images?
DHI images are reproducibly built, continuously vulnerability-scanned, and maintained with explicit remediation or VEX documentation — giving teams a production-ready alternative to generic base images while staying close to upstream behavior.
Trademarks
Argo® is a registered trademark of The Linux Foundation. This image is not affiliated with or endorsed by The Linux Foundation or the Argo project.