What's New - Minimus Documentation

August 2, 2026

New Feature

Track vulnerabilities still under review

Vulnerabilities awaiting analysis by the Minimus security team are now grouped separately in the version vulnerabilities report, so they’re never mixed in with confirmed findings. An indication also appears at the top level of the vulnerability report summary. Learn more

Enhancement

Popularity threshold now based on monthly Minimus downloads

The popularity control in supply chain policies moved from weekly downloads per package version to total monthly Minimus downloads across all versions, giving a more stable signal for vetting new packages. Learn more

New and returning Enterprise Edition users are now asked to accept a license agreement before continuing their work.

July 26, 2026

New

Risk reduction for Helm charts

See how much risk a Minimus Helm chart removes. The new Risk Reduction tab compares the confirmed vulnerabilities across all images deployed by the Minimus chart against the equivalent public chart, broken down by severity. A daily comparison report quantifies the reduction so you can see the security benefit at a glance. Browse the Helm chart gallery

Enhancement

More agents, more migrations

AI Integrations now covers Cursor and OpenAI Codex alongside Claude Code, so more of your team’s coding agents can build and migrate with secure Minimus images by default. Each agent can also migrate Helm charts and Kubernetes manifests, in addition to Dockerfiles. Add the rules to your repo so your agents follow them in every session.

Improved the Image Creator image cards so image names are easier to read. Previously, longer names could be truncated and hard to glance at; the refreshed card design fixes this.

July 21, 2026

Enhancement

Run minicli without installing it locally

minicli is now available as a container image, so you can run it directly without a local install. Mount a local directory to persist login credentials across runs, or pass a token at invocation for one-off use. Either way, it’s ready to drop into a CI/CD pipeline. Learn more

July 19, 2026

New

Python supply chain protection

Protect your Python package installations against typosquatting risks and suspicious version releases, with a cooling-off period and popularity threshold for new releases. Python and Node libraries are currently supported with more planned. Learn more

Enhancement

Browse Minimus images on the go

Mobile view improvements let you explore Minimus secure container images anytime, anywhere. Visit the Minimus image catalog at https://images.minimus.io/images/ and share it with your team to shift left and get started with best-in-class secure open source container images.

Improved Minimus Helm chart guides for simpler copy-paste deployment. The Helm install commands now include the exact chart version across all versions.
Removed AI migration tab from the image card, following its replacement by the new AI Integrations menu item.

July 12, 2026

New

Agent native integration

Give your AI coding agents native access to Minimus. Point them at our prompt to pull in secure images and Helm charts from day one. Enterprise Edition users can take the integration further with a permanent connection.

Enhancement

Get notified when your private image is ready

Get notified by email the moment your private image is ready in the gallery. Add teammates to keep your whole team in sync. Learn more

Enhancement

Restrict access to minicli tokens

Take control of who can connect via minicli. Tokens with minicli scope are now hidden from Viewers by default, with a simple path to restrict access further. Only the default token remains accessible to all users. Learn more

Removed obsolete package versions from the Image Creator viewer to protect against failed builds
Refined the display of private image cards and their tenant ID
Improved site performance and fixed issues impacting proper session termination

July 08 2026

Enhancement

Helm chart version changes

Minimus Helm charts have been migrated to track upstream chart versions. Charts that were previously versioned independently starting at 0.1.0 have been deprecated and will be removed over the coming weeks.Browse the Helm chart gallery

June 23 2026

New

Enterprise Edition updates

Minimus Enterprise Edition now includes full access to the Minimus image gallery right out of the box. Enjoy this new addition alongside all of the robust features you already rely on: Image Creator, minicli, Minimus actions, supply chain policies, logs, SSO, and more.Browse the image gallery

New

New! Minimus Community Edition is now available

Minimus Community Edition gives developers access to the Minimus image gallery to drive security in production. Images come with daily builds, compliance reports, signed artifacts, and security advisories — everything your team needs to stay ahead of vulnerabilities, at no cost. Get started

New Feature

Search images and Helm charts in one place

The gallery search now covers both images and Helm charts to help you find what you need faster. Browse the image gallery

June 14 2026

Enhancement

Supply chain policy updates

Supply chain policies can now be applied universally across any Minimus image to protect your npm environment without restrictions.As part of this update, the environment variable has been updated and the typosquatting control has been changed to a simple on/off toggle. Learn more

June 7 2026

New Feature

Comply with the CIS MariaDB Benchmark

Our new MariaDB-Hardened image complies with the app-specific CIS benchmark, making it easier to deploy CIS compliant MariaDB clusters.

New Feature

Set up actions for Helm chart version updates

Trigger webhooks, GitHub actions, or notifications in response to Helm chart version releases. The new action trigger will help you automate deployments and stay up to date. Learn more

Enhancement

Smarter Go dependency scanning

Introduced better CPE matching for specific golang modules to correct for scanner false negatives. Learn more

Update

STIG update

Updated the Datastream XCCDF Checklist for GPOS (General Purpose Operating System) to v3r2p2 (patch 2).This includes updated Rule IDs and OVAL Definition IDs, and the addition of CCI codes (Control Correlation Identifiers). Learn more

Fixed a usability issue affecting date filters in the logs view
Improved site performance for an even smoother user experience

May 31 2026

New Feature

Manage private images as code with minicli

minicli is the new Minimus CLI for defining, building, and managing private image configurations as code, directly from your terminal or CI/CD pipeline. It ships with built-in AI agent skills, so you can use tools like Cursor or Claude Code to manage your images with natural language. Learn more

Enhancement

Granular control over supply chain policies

We’ve added granular policy controls to the Minimus supply chain, giving you finer-tuned guardrails over package installations. Configure individual thresholds for cooling-off periods, popularity, typosquatting risk, and suspicious version releases, and manage allow and block lists. Learn more

May 24 2026

Enhancement

Enhanced gallery search

We’ve upgraded the image gallery search to support more complex and multi-term queries, giving you more precise results in fewer keystrokes.

Enhancement

New default view for advisories

We’ve reworked the Affected Images filter within advisories to give you more granular control.By default, the page now filters by My Images (your subscribed and private images). You can clear this filter to view advisories that are still under review or not yet linked to specific Minimus images, or adjust the selection to filter by all or specific images instead. Learn more

Added backlink support for multi-license packages in the image SBOM
Fixed the backlinks in email notifications pointing to private images.

May 10 2026

New Feature

EOL managed: guard against end-of-life image pulls

We’ve added a new action to trigger when EOL images are pulled from the Minimus registry. EOL actions are designed to help your team safeguard its operations against the use of unsupported image versions. Learn more

Fixed the backlinks in email notifications pointing to private images.

April 23 2026

New Feature

Generate a custom migration plan with AI

We’ve added a complex prompt designed for use with local AI agents with terminal access, such as Cursor, Cline, Claude Desktop, and others. Run the prompt to generate a custom migration plan tailored to your existing Dockerfile to help swap out the existing base and runtime images with Minimus images.

April 19 2026

New Feature

Never miss an image update

We’ve added a new action that triggers with every new image digest.Trigger webhooks, GitHub Actions, and notifications following any image update, whether a vulnerability fix, package update, configuration change, and more. Every change in the image Changelog reflects a new image build with a new digest, so you can use the new action to stay on top of all image updates. Learn more

New Feature

Comply with the CIS Apache Cassandra Benchmark

Our new Cassandra-Hardened image complies with the app-specific CIS benchmark, making it easier to deploy CIS compliant Cassandra clusters.

Enhancement

New Minimus Helm charts

We’ve added new Helm charts to help you deploy Minimus secure images quickly and effortlessly, with many more charts expected soon.Look for the Related Charts tab in the image card to quickly identify relevant Helm charts available from Minimus.

Enhancement

Quick reference package licenses

View official SPDX package license documents directly from the image SBOM. We’ve added reference links to the license details to cut out extra steps.

Improved the certificate management page in Creator to address edge-cases.
Updated the package comparison display in the Risk Reduction report.

April 12 2026

New Feature

Advanced certificate management with Minimus Creator

View certificate details directly in Creator and the associated File Management space. Certificate details include the Common Name (CN), organization, type, validity period, signature algorithm, SHA-256 fingerprint and more.The certificate validity status is clearly labeled to indicate whether it is valid, expired, or not yet valid. You can also download copies of your certificates directly from file bundles.

New Feature

Proactively replace deprecated image versions using Minimus Actions

We’ve added new triggers to activate Minimus Actions when an image line is nearing or has reached EOL. The new EOL action triggers are part of a general effort to add support indications to Minimus, including EOL, near EOL, and LTS indications.EOL-related actions can be used to send out notifications over Slack or email or trigger GitHub Actions and webhooks.

Enhancement

Get current vulnerability distribution information directly from Minimus Actions

Minimus Actions now include vulnerability distribution information in notifications announcing new image versions and vulnerability fixes.The change currently includes GitHub Actions and webhooks, and will soon extend to email alerts and Slack notifications as well.

Added option to View in GHSA for advisories of vulnerabilities that have not yet been listed by NVD.
Consecutive file bundle updates now seamlessly trigger corresponding rebuilds of linked images, ensuring every change is reliably reflected in your private image.

March 29 2026

New Feature

Comply with the CIS NGINX Benchmark

We’ve added a new NGINX-Hardened image to the list of Minimus Hardened Images. The new NGINX-Hardened image complies with app-specific CIS benchmarks and is also offered as a FIPS-validated option - NGINX-Hardened-FIPS image.

Enhancement

View default ports in the image specification tab

We’ve added a list of the default listening and exposed ports in the image version specification tab. Learn more

March 22 2026

Enhancement

Plan version upgrades with Minimus support indications

Don’t let end-of-life announcements catch you by surprise. The Minimus console redesigned the display of EOL, near EOL, and LTS indications to help teams plan their deployments and maintenance. Learn more

New Feature

New FIPS 140-3 certificate for OpenSSL

The Minimus Cryptographic Module has acquired a new CMVP certificate - certificate 5177. The Minimus Cryptographic Module is a FIPS validated OpenSSL module used in many Minimus FIPS validated images. Learn more

Enhancement

OCI labels

We’ve updated image labels to use the standard OCI format. OCI labels hold metadata that makes images transparent, traceable, and auditable. You will see the change when you run docker inspect.

OCI labels example

"Labels": {
    "io.minimus.images.line": "1.29",
    "org.opencontainers.image.created": "2026-03-19T17:13:28Z",
    "org.opencontainers.image.url": "https://images.minimus.io/images/nginx",
    "org.opencontainers.image.version": "1.29.6"
    },

Private images previously created with internal Python packages were automatically migrated to the equivalent auto-versioning Python packages. For example, if the package py3-babel was previously selected, it was migrated to py3-babel-auto. Learn more
Improved the performance of the advisories page and the advisories search and filtering functions

March 15 2026

New Feature

Plan for Long-Term-Support with Minimus

Know which image lines offer long-term-support (LTS) by the upstream project directly within Minimus. In addition to End of life (EOL) indications, image lines with official LTS status are now labeled in Minimus to help teams plan their deployments for long-term success and optimal maintenance. Learn more

New Feature

Minimus Creator promotes auto-packages

Minimus Creator already supports auto-versioning for Ruby, Python, and PHP packages. Now the package selector display also groups together package families leading with the auto-version option to help users when creating private images. Learn more

Bug Fix

Fixed an issue where the Changelog was not displayed for Dev variants of private images.

March 8 2026

New Feature

Compare package composition between Minimus images and their public counterparts

Get an immediate sense of the SBOM size and risk differences between a Minimus image and its public equivalent with a new graph in the Risk Reduction tab.Dive deeper into the comparison with a detailed breakdown of the packages used by each image and their version, license, and risk posture. As always, you can toggle the view between latest and latest-dev to view the relevant report. Learn more

March 1 2026

New Feature

Plan for the image line end-of-life with Minimus

Know when upstream support for the image line is scheduled to end directly within Minimus. End of life (EOL) indications are provided in both the image line menu and the changelog view. Hover over the line to see the exact EOL date. Learn more

New Feature

Understand build status and errors for your private images

Deep dive into your private image build statuses directly from the Creator space. You will be able to see exactly which image lines succeeded and which failed and why. As always, share the trace ID with our support team so we can assist you as soon as possible. Learn more

New Feature

Comply with the CIS MongoDB Benchmark

We’ve added a new Mongo-Hardened image to the list of Minimus Hardened Images. The new Mongo-Hardened image complies with app-specific CIS benchmarks and is also offered as a FIPS-validated option - Mongo-Hardened-FIPS image.

New Feature

Build-time auto-versioning for Ruby packages

We’ve expanded support for auto-versioning packages to include Ruby packages. Currently, Ruby, Python, and PHP auto-versioning packages are available in Creator to auto-match the starter image version at build time. Learn more

Enhancement

Stand-alone risk reduction reports

Benefit from a stand-alone risk reduction report even when there is no comparison image. Whether it is the static or glibc-dynamic images or something else, you will now be able to track the vulnerabilities trend over the past 30 days directly from the usual risk reduction tab.

Remove recent search results in the image gallery to keep only the ones you want.

February 22 2026

Enhancement

Helm chart signatures

Verify Minimus Helm charts using the Cosign signature. Simple step-by-step instructions were added in a dedicated tab in Minimus Helm charts. Learn more

Enhancement

Enhance your private gallery with image descriptions

Add descriptions to your private images to stay organized, capture image context, note usage details, or leave the team reminders for future reference. Descriptions can be added during image creation or updated anytime. To view a private image description, hover over the image in the gallery. Learn more

Enhancement

SAML role management

Managing SAML roles can get confusing when users belong to multiple groups or have individual role assignments. To help simplify the task, we’ve added helpful hints along the user configuration pages to guide admins more closely. Learn more

Enhancement

Official logo for FIPS 140-3 validated images

FIPS 140-3 validated images from Minimus get yet another boost with the adoption of the official NIST logo. The FIPS 140-3 logo is a certification mark of NIST.

February 18 2026

New Feature

Build-time auto-versioning for Python and PHP packages

When creating private images with Image Creator, pairing the right package version with the starter image version can potentially get tricky.To save you the trouble, Minimus added auto-versioning Python and PHP packages to auto-match the starter image version at build time. Learn more

February 15 2026

Enhancement

Recent searches at your fingertips

Dive back into your recent image searches at any time, even between sessions. Your last 10 searches are available from the search bar so you can freely explore the Minimus gallery without fear of losing your context.

Enhancement

Discover when images were first added

Easily see when images were first added to the Minimus image gallery. Switch to the recently added sorting option to see the exact date when the image first became available by Minimus.

February 8 2026

Enhancement

Actions for private images

Trigger webhooks and get alerted when a new version or vulnerability fix is out for your private images. Actions help teams deploy images smoothly and reliably.

Enhancement

File bundle usability enhancements

Usability enhancements for file bundles improve the configuration experience. A status label “new” was added to mark bundles created inside the Creator wizard. Validations were added to protect against edge cases, check file format, and more. Bundles show which images they are used in to further simplify bundle management.

February 1 2026

Enhancement

Sort images by popularity, recently added, or name

Sort the gallery to easily see which images were recently added or which images are most popular. As part of the change, your private images have been moved to the my images category and will no longer appear at the top of the general gallery.

Enhancement

Added support for SAML groups for Azure and Google providers

SAML groups for role-based access control now support all identity providers, including Okta, Azure, Google and others. Learn more

Enhancement

Enhanced the SAML configuration form

Configuring SAML groups for Minimus is now simpler with a toggle to enable the option when relevant.

New Feature

New FIPS 140-3 modules

Minimus has acquired a new FIPS CMVP certificate for Java - certificate 5142. In addition, Minimus utilizes a new FIPS module for BoringCrypto - certificate 5104.

Enhancement

Improved FIPS 140-3 testing instructions

The compliance FIPS display has been enhanced for clarity. Certificate and testing information for the OpenSSL and Java FIPS modules is shown separately for better understanding.

Improved the advisories search and filtering functions
Enhanced file bundles’ usability

January 25 2026

Enhancement

Filter by Advanced images and Helm charts

Easily identify Minimus images that support Bitnami Helm charts with a quick filter. Related charts and images cross-reference each other to enhance findability.

Improved configuration overrides with file bundles
Added support for file bundle events in activity logs

January 18 2026

Enhancement

Comprehensive changelog offers complete visibility

Easily see which packages were added, updated, or removed or which CVEs were fixed. We’ve expanded the changelog to reflect all changes without exception. The new comprehensive changelog makes it easier than ever to compare digests within the same image version and to understand what changed in every digest.Filter the list by a change category or search the log by specific package names and versions, the data is at your fingertips. Learn more

New Feature

Centrally manage certificates and other file bundles for private images

Centrally manage certificates and other file bundles for private images. Use the new file repository to update certificates for all your private images in one go. File bundles are versioned and automatically trigger a private image build upon update. Learn more

Enhancement

Control user access levels

We’ve added user roles to support RBAC (Role-Based Access Control). Roles provide control over who has access to create and edit private images, manage users, and more. Assign viewer, operator, and admin roles as appropriate. Learn more

New Feature

Audit changes in the activity log

Monitor your team’s activity in the Minimus activity log. See when users logged in or out of the system, when a private image was first created or updated, when users were added or removed from the system, and more. Learn more

New Feature

Comply with the CIS Postgres Benchmark

We’ve added a new category of Minimus Hardened Images that comply with specific CIS benchmarks. The first image to be released is Postgres-Hardened and Postgres-Hardened-FIPS.

New Feature

Manage SSO users with SAML groups

We’ve added support for SAML groups to simplify identity management. Learn more

Enhancement

Enhanced image gallery search

Search the Minimus gallery of images by image name or related terms. Search by related terms provides helpful suggestions so you can explore your options effortlessly. For example, search results will include related images in the same family or images with a similar function. Learn more

​August 2, 2026

​Track vulnerabilities still under review

​Popularity threshold now based on monthly Minimus downloads

​July 26, 2026

​Risk reduction for Helm charts

​More agents, more migrations

​July 21, 2026

​Run minicli without installing it locally

​July 19, 2026

​Python supply chain protection

​Navigation improvements

​Browse Minimus images on the go

​July 12, 2026

​Agent native integration

​Get notified when your private image is ready

​Restrict access to minicli tokens

​July 08 2026

​Helm chart version changes

​June 23 2026

​Enterprise Edition updates

​New! Minimus Community Edition is now available

​Search images and Helm charts in one place

​June 14 2026

​Supply chain policy updates

​June 7 2026

​Comply with the CIS MariaDB Benchmark

​Set up actions for Helm chart version updates

​Smarter Go dependency scanning

​STIG update

​May 31 2026

​Manage private images as code with minicli

​Granular control over supply chain policies

​May 24 2026

​Enhanced gallery search

​New default view for advisories

​May 10 2026

​EOL managed: guard against end-of-life image pulls

​April 23 2026

​Generate a custom migration plan with AI

​April 19 2026

​Never miss an image update

​Comply with the CIS Apache Cassandra Benchmark

​New Minimus Helm charts

​Quick reference package licenses

​April 12 2026

​Advanced certificate management with Minimus Creator

​Proactively replace deprecated image versions using Minimus Actions

​Get current vulnerability distribution information directly from Minimus Actions

​March 29 2026

​Comply with the CIS NGINX Benchmark

​View default ports in the image specification tab

​March 22 2026

​Plan version upgrades with Minimus support indications

​New FIPS 140-3 certificate for OpenSSL

​OCI labels

​March 15 2026

​Plan for Long-Term-Support with Minimus

​Minimus Creator promotes auto-packages

​March 8 2026

​Compare package composition between Minimus images and their public counterparts

​March 1 2026

​Plan for the image line end-of-life with Minimus

​Understand build status and errors for your private images

​Comply with the CIS MongoDB Benchmark

​Build-time auto-versioning for Ruby packages

​Stand-alone risk reduction reports

​February 22 2026

​Helm chart signatures

​Enhance your private gallery with image descriptions

​SAML role management

​Official logo for FIPS 140-3 validated images

​February 18 2026

​Build-time auto-versioning for Python and PHP packages

​February 15 2026

​Recent searches at your fingertips

​Discover when images were first added

​February 8 2026

​Actions for private images

​File bundle usability enhancements

​February 1 2026

August 2, 2026

Track vulnerabilities still under review

Popularity threshold now based on monthly Minimus downloads

July 26, 2026

Risk reduction for Helm charts

More agents, more migrations

July 21, 2026

Run minicli without installing it locally

July 19, 2026

Python supply chain protection

Navigation improvements

Browse Minimus images on the go

July 12, 2026

Agent native integration

Get notified when your private image is ready

Restrict access to minicli tokens

July 08 2026

Helm chart version changes

June 23 2026

Enterprise Edition updates

New! Minimus Community Edition is now available

Search images and Helm charts in one place

June 14 2026

Supply chain policy updates

June 7 2026

Comply with the CIS MariaDB Benchmark

Set up actions for Helm chart version updates

Smarter Go dependency scanning

STIG update

May 31 2026

Manage private images as code with minicli

Granular control over supply chain policies

May 24 2026

Enhanced gallery search

New default view for advisories

May 10 2026

EOL managed: guard against end-of-life image pulls

April 23 2026

Generate a custom migration plan with AI

April 19 2026

Never miss an image update

Comply with the CIS Apache Cassandra Benchmark

New Minimus Helm charts

Quick reference package licenses

April 12 2026

Advanced certificate management with Minimus Creator

Proactively replace deprecated image versions using Minimus Actions

Get current vulnerability distribution information directly from Minimus Actions

March 29 2026

Comply with the CIS NGINX Benchmark

View default ports in the image specification tab

March 22 2026

Plan version upgrades with Minimus support indications

New FIPS 140-3 certificate for OpenSSL

OCI labels

March 15 2026

Plan for Long-Term-Support with Minimus

Minimus Creator promotes auto-packages

March 8 2026

Compare package composition between Minimus images and their public counterparts

March 1 2026

Plan for the image line end-of-life with Minimus

Understand build status and errors for your private images

Comply with the CIS MongoDB Benchmark

Build-time auto-versioning for Ruby packages

Stand-alone risk reduction reports

February 22 2026

Helm chart signatures

Enhance your private gallery with image descriptions

SAML role management

Official logo for FIPS 140-3 validated images

February 18 2026

Build-time auto-versioning for Python and PHP packages

February 15 2026

Recent searches at your fingertips

Discover when images were first added

February 8 2026

Actions for private images

File bundle usability enhancements

February 1 2026