#Built-in Tool Images Selection Guide

This page helps you quickly choose the right tool image for your pipeline steps. It offers three ways to find what you need:

1. Select Image by Scenario — What do I need to do? Which image should I use?
2. Find Image by Tool — I need a specific tool. Which images include it?
3. Image Details — Full info for each image: registry, tags, tools, and usage boundaries.

Note: All image addresses in this document use registry.alauda.cn:60070 as the example prefix. At runtime, this is automatically replaced with the actual registry address of your environment.

---

#Select Image by Scenario

Quick start: find your current pipeline step's responsibility and use the recommended image directly.

---

#Find Image by Tool

Already know which tool you need? Find all images that include it and pick the one that best fits your scenario.

---

#Image Details

Full address format: <registry>:<tag>, e.g. registry.alauda.cn:60070/devops/tektoncd/hub/kubectl:latest.

#General

#run-script

#Source Control

#git-init

#glab

#Build

#maven

#python

#Image & Artifact

#buildah

#helm

#Security & Compliance

#trivy

#syft

#cosign

#sonarqube-scanner

#sonarqube-shell

#sonarqube-cli

#Deploy & Operations

#kubectl

#kubectl-app-manager

#kustomize

---

Notes:

• All images run as UID 65532 (non-root user).
• latest usually points to the newest fixed tag.
• latest may introduce major tool version changes in the future. Use fixed tags if stability is a priority.
• Tool versions are at the major.minor level; patch versions are upgraded automatically with image updates.