Compliance
Compliance
How to verify that your Minimus container images meet security, licensing, and regulatory requirements
CIS
Review a summary report detailing how the latest version of the image is compliant with the CIS Docker Benchmark. Every CIS ID is shown with the image status and a note explaining the decision.
FIPS
Minimus offers many FIPS validated images built with the Minimus Cryptographic Module to comply with the FIPS 140-3 standard. For FIPS validated images, run the command provided to test the module. The command overrides the default entrypoint to run a built-inopenssl-fips-test .
STIG
Minimus images that are FIPS validated are also STIG compliant. Switch to the STIG tab to preview the STIG Evaluation Report. Download the HTML report to drill down on the full details. Learn moreSTIG stands for Security Technical Implementation Guides (STIGs). STIGs are published by DISA, the Defense Information Systems Agency of the U.S. Department of Defense (DoD).
Image Signature
The image signature tab provides the commands for verifying thelatest and latest-dev images with Cosign. See our verification guide for additional information about verification with Cosign.
SBOM Signature
The SBOM signature tab provides the commands for verifying the SBOM attestation for thelatest image with Cosign. The Cosign command uses an architecture-specific digest ID and is provided for amd64 and arm64.