1. Images & Charts
  2. ko
Login

Echo is acquiring Minimus. See the announcementfor more details.

ko

ko

Utils
Updated 3 hours ago

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

90% CIS Docker compliance80% NIST complianceNeed a FIPS validated version?Go to ko-fips

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/ko:latest
vs.

Public Image

ghcr.io/ko-build/ko

Detailed Vulnerability Comparison

Daily report prepared September 26, 2026 at 3:45 AM

CVE
severity
Affected Packages
CVE-2026-4647
medium
binutils

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image
57 total packages
57 combined OS and application packages
Public Image
361 total packages
154 packages in additional layers
207 packages in base layer
Color indicates highest severity impacting the package:
critical
high
medium
low
unknown
none
Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared September 26, 2026 at 3:45 AM

Package
version
license
type
Total Vulnerabilities
libubsan114.2.0-19sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79deb0
libunistring51.3-2BSD-3-clause AND FreeSoftware AND GFDL-1.2+ AND GFDL-1.3+ AND GPL-2 AND GPL-2+ AND GPL-3 AND GPL-3+ AND ISC AND LGPL-2 AND LGPL-2+ AND LGPL-2.1 AND LGPL-2.1+ AND LGPL-3 AND LGPL-3+ AND Unicode-DFS-2016 AND X11 AND bsd-3-clause AND gfdl-1.2+ AND gfdl-1.3+ AND isc AND public-domain AND unicode-dfs-2016deb0
libutf8proc32.9.0-1+b2Expat AND Unicodedeb0
libxxhash00.8.3-2BSD-2-clause AND GPL-2 AND GPL-2+deb0
libzstd11.5.7+dfsg-1BSD-3-clause AND Expat AND GPL-2 AND zlibdeb0