Documentation

What is ImageSentinel?

ImageSentinel is a container image hardening platform that transforms vulnerable base images into secure, production-ready containers. We automatically scan, patch, and harden your container images, eliminating CVEs and providing complete supply chain transparency.

Key Features

• CVE-free images — Every image is scanned and patched before delivery
• Built on a hardened minimal base — minimal, secure, no inherited OS bloat
• Signed & verified — Cryptographic signatures with Sigstore
• Complete SBOM — Full software bill of materials for every image

Installation

Install the ImageSentinel CLI using npm or download the binary directly:

# Install via npm
npm install -g @imagesentinel/cli

# Or download binary
curl -sSL https://get.imagesentinel.io | sh

# Verify installation
imagesentinel --version
ImageSentinel CLI v1.0.0

Basic Usage

Once installed, you can start using hardened images immediately:

# Login to ImageSentinel registry
imagesentinel login

# Pull a hardened image
docker pull registry.imagesentinel.io/python:3.12-hardened

# Scan an image for vulnerabilities
imagesentinel scan myapp:latest

# Generate SBOM for an image
imagesentinel sbom myapp:latest --format spdx