pulumi-fips - Minimus

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/pulumi-fips:latest

vs.

https://hub.docker.com/layers/pulumi/pulumi/latest

Daily report prepared July 14, 2026 at 5:15 AM

CVE	severity	Affected Packages
CVE-2026-27143	critical	pulumi-fips pulumi-language-go-fips +2
GHSA-5c6j-r48x-rmvq	high	pulumi-fips pulumi-language-go-fips +2
CVE-2026-48712	high	pulumi-fips pulumi-language-go-fips +2
CVE-2026-39820	high	pulumi-fips pulumi-language-go-fips +2

Compressed image sizes for amd64.

29 total packages

29 combined OS and application packages

4775 total packages

3930 packages in additional layers

845 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared July 14, 2026 at 5:15 AM

Package	version	license	type
libxi6	2:1.8.2-1	sha256:c812f9c54513ae593aab9580b54a4b18219648df7068d49ca1daa47f522ba3fa	deb
libxinerama1	2:1.1.4-3+b4	sha256:e49d9732f261b3ffcb50c40914bd9d144de5557dad9b2ae20dbe8e3c5b3d17fb	deb
libxkbcommon0	1.7.0-2	sha256:5eeaeb1b6e029a0274e1573765bb0bae2926ef96a3679203faa4fd00fdaeaa88	deb
libxkbfile1	1:1.1.0-1+b4	sha256:41044d815bd99a5d1267fdabc79b5041fa83c7134639bb81e84f367cefe68316	deb
libxml-commons-external-java	1.4.01-6	Apache-2.0 AND BSD-3-Clause AND GPL-2+ AND public-domain	deb