1. Images & Charts
  2. tofu-controller-runner
Login

Echo is acquiring Minimus. See the announcementfor more details.

tofu-controller-runner

tofu-controller-runner

Infra
Updated 3 days ago

Risk Reduction

Understand the security benefits of the Minimus image by comparing its vulnerability profile and size to the public image.

Security Posture

Understand how Minimus vulnerability mitigations and compliance configurations secure this image.

100% CIS Docker compliance100% NIST complianceNeed a FIPS validated version?Go to tofu-controller-runner-fips

Vulnerabilities Comparison

Unique CVE count. Some vulnerabilities may impact multiple packages.

Minimus Image

reg.mini.dev/tofu-controller-runner:latest

0 Vulnerabilities

100% reduction
vs.

Public Image

ghcr.io/flux-iac/tf-runner

Detailed Vulnerability Comparison

Daily report prepared September 26, 2026 at 3:46 AM

CVE
severity
Affected Packages
GO-2026-5932
unknown
golang.org/x/crypto
golang.org/x/crypto
GO-2026-5841
unknown
github.com/klauspost/compress
CVE-2026-80256
unknown
libcurl
GHSA-22w5-2fxg-vrwx
low
github.com/opentofu/opentofu

Size Comparison (MB)

Compressed image sizes for amd64.

Package Count & Risk Comparison

Minimus Image
65 total packages
65 combined OS and application packages
Public Image
383 total packages
316 packages in additional layers
67 packages in base layer
Color indicates highest severity impacting the package:
critical
high
medium
low
unknown
none
Scale: 1 square = 1 package

Detailed Package Comparison

Report prepared September 26, 2026 at 3:46 AM

Package
version
license
type
Total Vulnerabilities
findutils4.11.0-r0GPL-3.0-or-laterapk
0 vulnerabilities
gawk5.4.1-r1GPL-3.0-or-laterapk
0 vulnerabilities
git2.55.0-r0GPL-2.0-or-laterapk
0 vulnerabilities
glibc2.44-r0LGPL-2.1-or-laterapk
0 vulnerabilities
glibc-locale-posix2.44-r0LGPL-2.1-or-laterapk
0 vulnerabilities