Tabs
Versions
The versions tab is a visual display of the images in the Minimus repository. The display includes 2 components:- The left minimap lists the image lines for quick navigation.
- The main display shows all of the versions available for a selected image line.
- The recommended tag with the option to copy the pull command in one-click with an embedded active token. A tally shows the number of alternative tags available. Click the version to drill down on it and see the full list of available tags. About the image version card
- A summary of the number of vulnerabilities currently impacting the image version broken down by severity categories. Vulnerability data shown on this page is current and updated often.
- An exploitability label shows if the image is currently affected by an active or likely exploit. Learn more
- A pull counter shows the number of times the image version was pulled by the organization (or by you, if you are on a personal account).
- The compressed image size for the amd64 architecture is listed.
Quick start
The quick start guide offers a few simple commands to help get started with the Minimus image, along with some pointers on how it is different from the public image. For in-depth instructions, refer to the documentation provided by the source project.Risk reduction
The risk reduction tab offers a security posture summary report and compares the vulnerability report and package composition between the Minimuslatest and latest-dev versions and the latest public image.
-
The Vulnerabilities Comparison graph shows a comparison of the unique CVE count over the previous 30 days.
Vulnerabilities detected and fixed on the same day are not included. If you’re interested in all fixes reported for a Minimus image, visit the image changelog instead.
-
The Detailed Vulnerability Comparison table lists all of the CVEs impacting each of the images: the latest Minimus image and the public image.
- For each vulnerability, the full list of impacted packages is provided.
- Click an item in the table to open the vulnerability card with further information about the CVSS severity score, exploitability, references and a direct link to the NVD listing.
- The Size Comparison widget compares the compressed image sizes for amd64.
Note that the data for the risk reduction comparison is compiled once a day (The time of the report is indicated). For the most recent vulnerability report for the latest image, see the image version card.
latest and latest-dev to show the respective report.
Compliance
The compliance tab demonstrates how the Minimus image meets security, licensing, and regulatory requirements. The information is organized in the following tabs: CIS, NIST, FIPS, STIG, image signature, and SBOM signature. Learn more
Changelog
A comprehensive changelog maps the image by image line and version, detailing every digest built by Minimus and the changes delivered by every image build. The data is organized by image line and image version as usual. Use the filtering options and searchbar to easily track vulnerability fixes, package version updates, packages added or removed, maintenance updates and more. Expand an entry in the changelog to view more details such as which CVE was fixed and what packages it affected, which packages were updated to what version, etc. Hover over an entry to select the option to compare digests. This button will open the Digest History tab within the image version card. The digest history view shows the latest number of vulnerabilities reported for each image digest and their severity. Learn more about the Minimus image update policy
- Toggle between Prod and Dev images. Production and development image lines are shown separately.
- Expand any fixed vulnerability entry to drill down on the details. The expanded view offers a shortcut link to open the full advisory listing in another browser tab.
- Search the list by a digest to understand if newer builds have since been released for the same image version and whether they fix vulnerabilities.
- EOL indications and dates are provided in the changelog tab. Learn more
Related charts
Images that are can be deployed using Minimus curated Helm charts include a tab showing related charts. Select a chart from the list to be redirected to the relevant Helm chart page where you can look up version details and deployment instructions. Learn more
EOL details
Minimus provides information about end-of-life dates for image lines, whenever possible, and alerts when they are approaching. EOL indications are shown in both the Versions and Changelog tabs. EOL indications in the image line minimap involve several aspects:- Image lines are arranged by their support schedule. Lines with the longest support schedule and the farthest end-of-life (EOL) date appear first.
- Lines that have already reached end-of-life are shown separately under a clear header: EOL.
- Hover over any image line in the minimap to view the exact EOL date.
- Once the EOL date is under 3 months, Minimus will show a countdown in the minimap to alert users that the EOL is fast approaching.
Drill down
Select any version to drill down on the image version’s details, including the image’s specifications, SBOM, current vulnerability report, and digest history. About the image version cardPrivate images
The image card for private images includes the following tabs:- Versions - complete with a vulnerability report for every version, SBOM, and digest history.
- The image lines and versions of the private image match those of the starter image.
- Private images have
prodanddevtags. - Private images provide the EOL dates for the starter image.
- Compliance - includes full CIS and NIST compliance reports, image signature and SBOM signature.
- STIG and FIPS need to be validated independently.
- Changelog - complete with all vulnerability fix announcements and related advisories.
The risk reduction tab is hidden for private images.