pulumi - Minimus

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/pulumi:latest

vs.

https://hub.docker.com/layers/pulumi/pulumi/latest

Daily report prepared July 12, 2026 at 5:11 AM

Compressed image sizes for amd64.

25 total packages

25 combined OS and application packages

4771 total packages

3926 packages in additional layers

845 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared July 12, 2026 at 5:11 AM

Package	version	license	type
libubsan1	14.2.0-19	Artistic AND GFDL-1.2 AND GPL AND GPL-3 AND LGPL	deb
libunbound8	1.22.0-2+deb13u3	BSD-2-VUT AND BSD-3-ADG AND BSD-3-CZ.NIC AND BSD-3-Farsight AND BSD-3-NLnetLabs AND BSD-3-NLnetLabs-Mekking AND BSD-3-Regents-DEC AND BSD-3-Todd-Miller AND BSD-3-VUT AND BSD-3-Viagénie AND BSD-3-WIDE AND GPL-3 AND GPL-3+ AND ISC AND public-domain	deb
libunistring5	1.3-2	BSD-3-clause AND FreeSoftware AND GFDL-1.2+ AND GFDL-1.3+ AND GPL-2 AND GPL-2+ AND GPL-3 AND GPL-3+ AND ISC AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-3 AND LGPL-3+ AND Unicode-DFS-2016 AND X11 AND bsd-3-clause AND gfdl-1.2+ AND gfdl-1.3+ AND isc AND public-domain AND unicode-dfs-2016	deb
libvulkan1	1.4.309.0-1	Apache-2.0 AND MIT	deb
libwagon-file-java	3.5.3-2	Apache-2.0	deb