1. Images & Charts
  2. authservice-fips
Login

Echo is acquiring Minimus. See the announcementfor more details.

authservice-fips

authservice-fips

Fips
Infra
Stig
Updated on September 5

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

100% CIS Docker compliance100% NIST complianceFIPS 140-3 validated100% STIG compliance

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/authservice-fips:latest

0 Vulnerabilities

100% reduction
vs.

Public Image

ghcr.io/istio-ecosystem/authservice/authservice

Detailed Vulnerability Comparison

Daily report prepared September 20, 2026 at 3:47 AM

CVE
severity
Affected Packages
GHSA-hrxh-6v49-42gf
high
google.golang.org/grpc
CVE-2026-84445
high
google.golang.org/grpc
CVE-2026-84304
high
google.golang.org/grpc
CVE-2026-78662
high
golang.org/x/crypto

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image
14 total packages
14 combined OS and application packages
Public Image
80 total packages
80 packages in additional layers
Color indicates highest severity impacting the package:
critical
high
medium
low
unknown
none
Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared September 20, 2026 at 3:47 AM

Package
version
license
type
Total Vulnerabilities
ld-linux2.44-r0LGPL-2.1-or-laterapk
0 vulnerabilities
libcrypto33.5.8-r0Apache-2.0apk
0 vulnerabilities
libgcc-1616.2.0-r0GPL-3.0-or-later WITH GCC-exception-3.1apk
0 vulnerabilities
libssl33.5.8-r0Apache-2.0apk
0 vulnerabilities
minimos-baselayout20241031-r14MITapk
0 vulnerabilities