Minimus

🎯 Start practicing your aim, #KubeConEU and #RSAC

📍 Two conferences. 🏆️🚙 One Mini (Cooper) Prize.

See you at there!

👀 A package update. A vulnerability fix. Full advisory history.

Minimus' detailed changelogs let you drill into exactly what changed, what was impacted, and whether you want to pull the update. That’s how agile security should work.

Minimal Distroless Images: Benefits Beyond Security - Minimus Minimal distroless images offer more than security benefits. Smaller images cut infrastructure costs, speed CI/CD, and improve performance across environments.

Minimal images reduce more than vulnerabilities. They reduce storage, transfer costs, CI/CD time, and operational overhead across every environment. This post breaks down the additional benefits:

SCALE 23x is almost here and we’re excited to sponsor this incredible community event.

Workshops, real conversations, and practical sessions across open source, security, and cloud native.

📍 March 5–8 in Pasadena.

Register for the event here: buff.ly/QvbOjO6

Zero Trust with Minimus - Minimus Build Zero Trust from the image up. Minimus hardened containers deliver verifiable builds, minimal attack surface, and signed artifacts for a secure foundation.

Zero Trust doesn’t start at runtime. It starts with what you build and ship. 🛠️ 🚢

This guide breaks down how hardened, minimal container images help operationalize Zero Trust across the software supply chain, from verified source to runtime enforcement:

As adoption grows, the security of the containers running AI agents is often overlooked. Popular OpenClaw images currently ship with thousands of known vulnerabilities.

We built a hardened minimal alternative with 99% fewer CVEs. Same functionality. Free for the community:

buff.ly/ETat0FE

Catch John Morello on Somaini’s Trust Issues 🎙️

He and Justin Somaini cover everything from John's early days at Microsoft, to practical security lessons, to how Minimus is rethinking the way security should work: buff.ly/dVI4Mgd

Minimus RBAC: Granular Access Control for Container Security - Minimus Minimus RBAC replaces manual permissions with Viewer, Operator, and Admin roles, improving security, auditability, and operational efficiency.

Granular access control is essential as container security programs scale. This post breaks down how Minimus RBAC helps teams apply least-privilege access, streamline user management, and maintain clear audit trails across environments:

Most OpenClaw container images have 1000-2000+ known vulnerabilities. That’s a big deal if you’re running an AI assistant with access to your messages, files, API keys, and system.

We built a free-to-use Minimus OpenClaw image with the same functionality and 99% fewer CVEs: buff.ly/jkdauGS

Application Level Hardening for Compliance - Minimus Go beyond base image compliance with application-level hardening. Minimus delivers pre-hardened images and audit-ready validation.

Hardening doesn’t stop at the base image. This post explores what application-level hardening involves and how Minimus delivers it alongside built-in compliance and validation:

Teams often need the same certificates or config files across multiple images. Instead of rebuilding that logic repeatedly, file bundling in Minimus allows you to manage those files centrally and include them automatically in private builds.

Learn more: buff.ly/8pXeEiO

Version tags alone don’t tell you what actually changed inside an image. Our detailed changelog shows package updates, vulnerability fixes, and advisories across versions, so teams can review and adopt updates with confidence.

Learn more: buff.ly/kcVKI05

We're having a great time at #ContainerDays London! The Minimus team is here tomorrow too, so stop by to say hello!

“The problem isn’t malicious code. It’s unnecessary code.” In this interview, our CEO, Ben Bernstein, reflects on lessons learned, unnecessary complexity, and building software that can actually scale: buff.ly/vjQuAF7

File Bundles in Minimus Image Creator let you include required files in your minimal images automatically, without managing separate build logic or one-off Dockerfile changes. Learn how it works and how to get started: buff.ly/uzUrVVb

#ContainerSecurity #CloudNative #DevSecOps #Minimus

How to Use CBOMs in Containerized Environments - Minimus A practical guide to using CBOMs in containerized environments, covering data formats, tools, and cryptographic risk management.

What does a CBOM look like in practice? This post walks through CBOM data formats, emerging tools, and real use cases for container image and platform teams: buff.ly/wq2ar7x

#ContainerSecurity #DevSecOps #Cryptography #Minimus

From SBOM to CBOM: Cryptographic Visibility for Containers - Minimus Learn what a Cryptographic Bill of Materials (CBOM) is, how it complements SBOMs, and why cryptographic visibility matters for container image security.

SBOMs give visibility into what’s inside container images, but not how cryptography is implemented or configured. This post explores how CBOMs add that missing layer of cryptographic visibility and why they matter for container security: buff.ly/M1JGSBf

#ContainerSecurity #Minimus

⚠️ Open-source FIPS models push long-term responsibility back onto the customer. ✅ Minimus uses a commercial FIPS validation model so your images stay compliant as vulnerabilities are fixed and standards evolve.

Learn about the options for FIPS validation: buff.ly/d89xfzJ

☕️🖐️ @kat.lol and @isaacrlevin.com talk everything from shipping Kubernetes to how tiny hands somehow became Minimus swag on Coffee and Open Source:

buff.ly/3rCqGHa

🏆 We won the Containers category at the 2025 Tech Trailblazers Awards! These awards recognize innovative enterprise tech startups from around the world, and we’re proud to be among them. Thanks to everyone who voted and supported us.

buff.ly/4oU4OO0

How to Move From Distribution-Based Images to Distroless - Minimus Learn why distroless images are more secure and how to migrate from distro-based images to distroless with Minimus, without breaking existing workflows.

Learn why distroless images offer a more secure foundation than traditional distribution-based images and how to migrate without disrupting your existing workflows:

buff.ly/CC26kU3

#ContainerSecurity #Distroless #DevSecOps #Minimus #CloudNative

📋🛡️ Auditors don’t ask if you use FIPS validated images. They ask who maintains validation and how you prove it’s current.

Learn about the three FIPS 140-3 validation models and what they mean for long-term compliance: buff.ly/YnYAcij

We made the shortlist! Minimus is a finalist in both the Containers and Networking categories at the 2025 Tech Trailblazers Awards. 🥳 If you’ve been cheering us on this year, we have a request: 🗳️ Vote for us! buff.ly/dGrQPnU

🛡️ FIPS 140-3 is the third iteration of the Federal Information Processing Standard that governs how cryptographic modules are designed, tested, and validated.

🔗 Learn more about FIPS and how it strengthens security and compliance in container images: buff.ly/WRfvkAj

#FIPS #compliance

Sha1-Hulud 2.0 - The Second Coming: What You Need To Know - Minimus What happened and how Sha1-Hulud 2.0 works: a second-gen supply chain worm infecting npm packages, harvesting credentials, and replicating across GitHub.

⚠️🐛 Heard a lot about Sha1 Hulud 2.0? If you want a clear technical breakdown of how the worm spreads, steals credentials, and replicates across GitHub, check out our latest blog post:

Today is Giving Tuesday! This year, we made a donation to Feeding America. At Minimus, we believe we have a responsibility to give back and support our communities in need. We would love to know which organizations you’re supporting this year!

#GivingTuesday #Cybersecurity

Minimus was recently announced as one of CRN’s Stellar Startups for 2025! 🌟
We’re honored to receive this recognition - huge shout out to our team for the hard work behind every image.

buff.ly/7K8eYvU

👋 Waving goodbye to KubeCon! Hands down, an incredible week. Thanks to everyone who stopped by the booth!

#Minimus #KubeCon #CloudNativeCon #Cybersecurity

play darts win a car

I think we have found the #kubecon swag winner @minimus.io

We’re loving the energy at KubeCon! The DART Challenge high score stands at an impressive 116. Visit space 1300 to take your best shot at winning a Mini Cooper! 🚗 🎯

#Minimus #KubeCon #CloudNativeCon #Cybersecurity