buildah | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/buildah:latest

100% reduction

vs.

quay.io/buildah/stable

Daily report prepared September 22, 2026 at 3:31 AM

CVE	severity	Affected Packages
CVE-2026-3219	medium	pip
CVE-2026-24137	medium	github.com/sigstore/sigstore
CVE-2026-22772	medium	github.com/sigstore/fulcio
CVE-2026-81870	low	go.opentelemetry.io/otel

Compressed image sizes for amd64.

104 total packages

104 combined OS and application packages

367 total packages

125 packages in additional layers

242 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared September 22, 2026 at 3:31 AM

Package	version	license	type	Total Vulnerabilities
aardvark-dns	2.1.0-r0	Apache-2.0	apk	0 vulnerabilities
bash	5.3-r4	GPL-3.0-or-later	apk	0 vulnerabilities
bash-binsh	5.3-r4	GPL-3.0-or-later	apk	0 vulnerabilities
buildah	1.45.1-r0	Apache-2.0	apk	0 vulnerabilities
buildah-oci-compat	1.45.1-r0	Apache-2.0	apk	0 vulnerabilities