pulumi-fips - Minimus

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/pulumi-fips:latest

vs.

https://hub.docker.com/layers/pulumi/pulumi/latest

Daily report prepared July 15, 2026 at 5:12 AM

CVE	severity	Affected Packages
CVE-2026-25679	high	pulumi-fips pulumi-language-go-fips +2
CVE-2025-61726	high	pulumi-fips pulumi-language-go-fips +2
CVE-2025-61723	high	pulumi-fips pulumi-language-go-fips +2

Compressed image sizes for amd64.

29 total packages

29 combined OS and application packages

4779 total packages

3934 packages in additional layers

845 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared July 15, 2026 at 5:12 AM

Package	version	license	type
libpangoft2-1.0-0	1.56.3-1	Apache-2 AND Apache-2.0 AND Bitstream-Vera AND Chromium-BSD-style AND Example AND ICU AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND OFL-1.1 AND TCL AND Unicode	deb
libpciaccess0	0.17-3+b3	GPL	deb
libpcre2-8-0	10.46-1~deb13u1	BSD-2-clause AND BSD-3-clause AND BSD-3-clause-Cambridge AND X11 AND public-domain	deb
libpcsclite1	2.3.3-1	BSD-3-clause AND GPL-3 AND GPL-3+ AND ISC AND MIT	deb
libpfm4	4.13.0+git99-gc5587f9-1	Expat	deb