gitlab-shell | Minimus Gallery

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

Unique CVE count. Some vulnerabilities may impact multiple packages.

reg.mini.dev/gitlab-shell:latest

100% reduction

vs.

registry.gitlab.com/gitlab-org/build/cng/gitlab-shell

Daily report prepared October 25, 2026 at 3:44 AM

100% reduction

Compressed image sizes for amd64.

63 total packages

63 combined OS and application packages

381 total packages

254 packages in additional layers

127 packages in base layer

Color indicates highest severity impacting the package:

critical

high

medium

low

unknown

none

Scale: 1 square = 1 package

Report prepared October 25, 2026 at 3:44 AM

Package	version	license	type	Total Vulnerabilities
curl	7.88.1-10+deb12u15	BSD-3-Clause AND BSD-3-clause AND BSD-4-Clause-UC AND FSFULLR AND GPL-2 AND GPL-2+ AND GPL-3+ AND ISC AND OLDAP-2.8 AND X11 AND curl	deb	38
libcurl4	7.88.1-10+deb12u15	BSD-3-Clause AND BSD-3-clause AND BSD-4-Clause-UC AND FSFULLR AND GPL-2 AND GPL-2+ AND GPL-3+ AND ISC AND OLDAP-2.8 AND X11 AND curl	deb	38
busybox	1:1.35.0-4+deb12u1+b1	sha256:336d995e819d3a7a3fdbf3f5041c07094f75ee849acb3bb742b7503d45786329	deb	30
openssh-client	1:9.2p1-2+deb12u10	BSD-2-clause AND BSD-3-clause AND Expat-with-advertising-restriction AND Mazieres-BSD-style AND OpenSSH AND Powell-BSD-style AND public-domain	deb	28
openssh-server	1:9.2p1-2+deb12u10	BSD-2-clause AND BSD-3-clause AND Expat-with-advertising-restriction AND Mazieres-BSD-style AND OpenSSH AND Powell-BSD-style AND public-domain	deb	28