pulumi-fips - Minimus

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/pulumi-fips:latest

vs.

https://hub.docker.com/layers/pulumi/pulumi/latest

Daily report prepared July 15, 2026 at 5:12 AM

Compressed image sizes for amd64.

29 total packages

29 combined OS and application packages

4779 total packages

3934 packages in additional layers

845 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared July 15, 2026 at 5:12 AM

Package	version	license	type
librhino-java	1.7.15.1-0.1~deb13u1	BSD-3-clause-google AND BSD-3-clause-sun AND MPL-2.0	deb
librsvg2-2	2.60.0+dfsg-1	0BSD AND Apache-2.0 AND Apache-2.0, AND BSD-2-clause AND BSD-3-clause AND Boost-1.0 AND CC-zero-waive-1.0-us AND Expat AND FSFAP AND LGPL-2 AND LGPL-2+ AND MPL-2.0 AND OFL-1.1 AND Sun-permissive AND Unlicense AND zlib	deb
librsvg2-common	2.60.0+dfsg-1	0BSD AND Apache-2.0 AND Apache-2.0, AND BSD-2-clause AND BSD-3-clause AND Boost-1.0 AND CC-zero-waive-1.0-us AND Expat AND FSFAP AND LGPL-2 AND LGPL-2+ AND MPL-2.0 AND OFL-1.1 AND Sun-permissive AND Unlicense AND zlib	deb
librtmp1	2.4+20151223.gitfa8646d.1-2+b5	GPL-2 AND LGPL-2.1	deb
libsasl2-2	2.1.28+dfsg1-9	BSD-2-clause AND BSD-2.2-clause AND BSD-3-Clause-Attribution AND BSD-3-clause AND BSD-3-clause-JANET AND BSD-3-clause-PADL AND BSD-4-clause-UC AND FSFULLR AND GPL-3 AND GPL-3+ AND IBM-as-is AND MIT-CMU AND MIT-Export AND MIT-OpenVision AND OpenLDAP AND RSA-MD	deb