1. Images & Charts
  2. pulumi
Login

Echo is acquiring Minimus. See the announcementfor more details.

pulumi

pulumi

Infra
Updated 20 hours ago

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

90% CIS Docker compliance80% NIST complianceNeed a FIPS validated version?Go to pulumi-fips

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/pulumi:latest
vs.

Public Image

https://hub.docker.com/layers/pulumi/pulumi/latest

Detailed Vulnerability Comparison

Daily report prepared September 26, 2026 at 3:33 AM

CVE
severity
Affected Packages
GHSA-5c6j-r48x-rmvq
high
pulumi-language-nodejs
CVE-2026-48712
high
pulumi-language-nodejs
CVE-2026-33814
high
pulumi-language-nodejs
CVE-2026-32283
high
pulumi-language-nodejs

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image
25 total packages
25 combined OS and application packages
Public Image
5,172 total packages
4,328 packages in additional layers
844 packages in base layer
Color indicates highest severity impacting the package:
critical
high
medium
low
unknown
none
Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared September 26, 2026 at 3:33 AM

Package
version
license
type
Total Vulnerabilities
libbrotlidec11.2.0-r0MITapk
0 vulnerabilities
libbrotlienc11.2.0-r0MITapk
0 vulnerabilities
libcrypto33.5.8-r0Apache-2.0apk
0 vulnerabilities
libgcc-1616.2.0-r0GPL-3.0-or-later WITH GCC-exception-3.1apk
0 vulnerabilities
libnghttp2-141.70.0-r0MITapk
0 vulnerabilities