Minimus

No entries match these filters. Clear filters

1. docs update Aug 24, 2026 · issue 055

   Minimus AI Integrations teach AI coding agents to build and migrate Dockerfiles using hardened distroless base images.

   └──▷ HOW TO FIND IT
   Quickly harden an existing Dockerfile in a one-off chat session without any account or setup — paste the migration prompt directly into your AI agent.
   📍In Claude Code, Cursor, or OpenAI Codex: paste the Minimus migration prompt (copied from https://minimus.io/ai-integrations) into the chat, then ask the agent to migrate your existing Dockerfile to use Minimus distroless images.
   • New Minimus AI Integrations capability delivers a Dockerfile migration prompt that guides AI agents (Claude Code, Cursor, OpenAI Codex, Windsurf, GitHub Copilot) to use hardened Minimus distroless images instead of bloated general-purpose base images.
   • Agents are guided to produce multi-stage Dockerfiles using the dev variant (includes shell and package manager) for the build stage and the fully distroless production variant for the runtime stage, minimizing attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
   • Community Edition users can paste the one-off migration prompt directly into an AI chat session to migrate a single Dockerfile or scaffold a new containerized app with no account or setup required.
   • Enterprise Edition adds per-repository AI integration so every agent working in a codebase automatically follows Minimus conventions for that project.
   • Enterprise Edition adds a global AI integration that configures Minimus conventions once across an entire organization, applying to all agents on any repository.

   +2 more show less

   • Enterprise Edition supports Generate skills for minicli, equipping agents to create, configure, and inspect private Minimus images using natural language prompts; GitHub Copilot and Windsurf are supported via minicli only.
   • Minimus image discovery requires no authentication, removing setup friction for agents performing image lookup and tag selection.

   7 details in Everything

2. August 16, 2026 Aug 16, 2026 · issue 048

   Minimus adds per-CVE package-level advisory tracking and action rule success/failure logging with Activity Log integration.

   • Adds a Package column alongside the existing Origin Package column in the Advisories table, enabling filtering by both the origin package and the affected package.
   • Adds a breakdown of affected packages within each origin package per CVE/GHSA in the image vulnerabilities tab summary, with a link to a pre-filtered advisories view.
   • Action rules now display a status indicator for their most recent invocation and a running count of how many times they have triggered.
   • Every action rule invocation (success or failure) is written to the Activity Log, with a new Open Action button on each log entry to jump directly to the related action rule.

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Detected column has been removed from the Advisories table and is now only accessible in the detailed dialog.
3. August 9, 2026 Aug 9, 2026 · release notes

   Minimus adds org-level Global tab for AI rule deployment and enhanced supply chain audit details.

   └──▷ HOW TO FIND IT
   Deploy AI rules to the entire organization once via the UI instead of managing them in every repository.
   📍Navigate to AI Integrations › Global tab
   View specific failed package versions during supply chain checks in the audit log.
   📍Check Audit Log for 'package versions didn’t meet the cooling-off period'
   • Adds the Global tab on the AI Integrations page to set organization-scoped rules that apply to every repo without per-repo files
   • Extends supply chain policy alerts and blocks in the Audit Log to show exactly which package versions failed the cooling-off period
   • Adds guardrail trigger explanations to supply chain violation messages for npm

   3 details in Everything

4. August 2, 2026 Aug 2, 2026 · release notes

   Minimus August 2, 2026 release introduces new vulnerability report grouping and updated supply chain popularity logic.

   └──▷ HOW TO FIND IT
   Filter the UI or API to exclude unconfirmed findings from active incident response workflows.
   📍Steps: Navigate to Version Vulnerabilities Report › Look for Vulnerabilities Under Review group and top-level indicator.
   • Groups Vulnerabilities Under Review separately in the version vulnerabilities report with a top-level summary indication
   • Bases supply chain policy popularity threshold on total monthly Minimus downloads across all versions instead of weekly downloads per package version

   2 details in Everything

5. July 26, 2026 Jul 26, 2026 · release notes

   Minimus July 26 adds a Risk Reduction tab for Helm charts, expands AI Integrations to Cursor and OpenAI Codex, and enables agent-based migration of Kubernetes manifests.

   └──▷ HOW TO FIND IT
   Visualize the security benefit of using a Minimus Helm chart over a standard public chart by viewing daily risk reduction reports in the UI.
   📍In the Minimus dashboard, navigate to the Helm Charts section and open the new Risk Reduction tab to view confirmed vulnerability comparisons and daily reports.
   Configure your coding agent to use secure Minimus images for builds by adding the necessary rules to your repository, ensuring agents like Cursor or OpenAI Codex follow these standards.
   📍Add the Minimus AI Integration rules files to your repository root so that connected agents (Cursor, OpenAI Codex) automatically use secure images during migration and build tasks.
   • Adds a Risk Reduction tab that compares confirmed vulnerabilities across images deployed by the Minimus Helm chart against an equivalent public chart, providing a daily comparison report quantifying risk reduction by severity.
   • Expands AI Integrations to support Cursor and OpenAI Codex agents alongside Claude Code, allowing these agents to build and migrate with secure Minimus images by default.
   • Enables Cursor, OpenAI Codex, and Claude Code agents to migrate Helm charts and Kubernetes manifests in addition to Dockerfiles.

   3 details in Everything

6. July 21, 2026 Jul 21, 2026 · release notes

   Minimus adds container support for minicli, enabling CI/CD integration without local installation

7. July 19, 2026 Jul 19, 2026 · release notes

   Minimus adds Python supply chain protection with typosquattingtyposquattingUsing a name close to a trusted domain or software package to catch spelling mistakes. Attackers use it to lure people or installers to a malicious lookalike. detection and introduces shorter image URL defaults.

   • Protect your Python package installations against typosquatting risks and suspicious version releases, with a cooling-off period and popularity threshold for new releases. python supply chain protection is now available alongside existing node support.
   • Image URLs updated to make them shorter and simpler; the default changed from the image versions to the image overview (e.g., /images/openclaw instead of /gallery/images/openclaw/version).
   • Mobile view improvements let you explore Minimus secure container images anytime, anywhere via https://images.minimus.io/images/.

   3 details in Everything

8. July 12, 2026 Jul 12, 2026 · release notes

   Adds Minimus AI Agent integration, email notifications for Image Creator, and minicli token visibility controls.

   • new Adds a prompt-based integration allowing AI coding agents to pull secure images and Helm charts directly from Minimus. Enterprise Edition users can establish a permanent connection instead of one-time pulls.

   1 detail in Everything

9. June 23 2026 Jun 23, 2026 · release notes

   Minimus releases Community Edition and adds global search for images and Helm charts.

   └──▷ HOW TO FIND IT
   Access enterprise-grade image gallery features.
   📍Log in with Enterprise credentials to access the full Minimus image gallery
   • Adds global search capability to browse both container images and Helm charts in one place
   • Includes full access to the Minimus image gallery for Enterprise Edition users

   2 details in Everything

10. June 7 2026 Jun 7, 2026 · release notes

    Minimus adds MariaDB CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark compliance, Helm chart version action triggers, and smarter Go dependency scanning.

    • Adds a new MariaDB-Hardened image that complies with the CIS MariaDB Benchmark for deploying compliant clusters
    • Introduces a new actions feature to trigger webhooks, GitHub actions, or notifications on Helm chart version updates
    • Enhances Go dependency scanning with improved CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. matching for golang modules to reduce false negatives

    3 details in Everything

11. May 31 2026 May 31, 2026 · release notes

    Minimus adds minicli CLI for managing private images as code and granular supply chain policy controls.

    • Introduces minicli, a new CLI command for defining, building, and managing private image configurations as code.
    • Adds granular supply chain policy controls allowing configuration of thresholds for cooling-off periods, popularity, typosquattingtyposquattingUsing a name close to a trusted domain or software package to catch spelling mistakes. Attackers use it to lure people or installers to a malicious lookalike. risk, and suspicious version releases.

    2 details in Everything

12. May 24 2026 May 24, 2026 · release notes

    Minimus adds multi-term gallery search and changes advisories default filter to My Images

    └──▷ HOW TO FIND IT
    Use complex terms to narrow down your gallery search results
    📍Enter production nginx latest in the image gallery search bar
    Review all public advisories by clearing the default filter
    📍On the Advisories page, click to clear the Affected Images filter
    • Enhanced gallery search now supports complex, multi-term queries for more precise results
    • Advisories page now defaults the Affected Images filter to My Images (subscribed and private images)

    2 details in Everything

13. April 23 2026 Apr 23, 2026 · release notes

    Minimus adds an AI migration prompt for generating custom plans to replace Dockerfile base/runtime images.

    └──▷ HOW TO FIND IT
    Generate a migration plan for your current Dockerfile using the new AI prompt in your local agent.
    📍Provide the April 23 2026 release notes section titled "Migration Prompt New Feature Generate a custom migration plan with AI" to your local AI agent along with your existing Dockerfile content.
    • Adds a new complex prompt designed for use with local AI agents (e.g., Cursor, Cline, Claude Desktop) to generate a custom migration plan tailored to your existing Dockerfile.

    1 detail in Everything

14. April 19 2026 Apr 19, 2026 · release notes

    Minimus adds image digest-triggered actions, Cassandra-H Helm charts, and SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. license links

    • Adds image-digest-changed action to trigger workflows on any new container image digest.
    • Adds cassandra-hardened image compliant with the CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Apache Cassandra Benchmark via new Helm chart support.

    2 details in Everything

15. April 12 2026 Apr 12, 2026 · release notes

    Minimus Creator adds certificate details view and EOL action triggers

    └──▷ HOW TO FIND IT
    Audit certificate metadata and validity status directly within the Creator UI before deployment.
    📍In Creator, navigate to a certificate entry in the File Management space to view CN, SHA-256, and validity labels.
    Proactively manage deprecated images by triggering notifications or external workflows upon EOL status.
    📍Configure Minimus Actions to use the new near EOL and EOL triggers to send Slack/email alerts or webhook events.
    • View certificate details (CN, org, validity, SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.) in Creator and File Management space
    • Trigger Minimus Actions when image lines reach near or full EOL via new EOL action triggers

    2 details in Everything

16. March 29 2026 Mar 29, 2026 · release notes

    Minimus adds NGINX-Hardened CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline./FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. images and default port visibility

    • Adds NGINX-Hardened image compliant with CIS NGINX Benchmark
    • Adds NGINX-Hardened-FIPS image option for FIPS validation
    • Displays default listening and exposed ports in the image version specification tab

    3 details in Everything

17. March 22 2026 Mar 22, 2026 · release notes

    Minimus adds EOL display enhancements, FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. cert for OpenSSL, and OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. label standardization.

    • Console redesigned the display of EOL, near EOL, and LTS indications to help teams plan deployments and maintenance
    • Minimus Cryptographic Module acquired new CMVP certificate 5177 (FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. 140-3) for OpenSSL
    • Image labels updated to use standard OCI format (e.g. org.opencontainers.image.version)

    3 details in Everything

18. March 15 2026 Mar 15, 2026 · release notes

    Minimus adds LTS status labels to image lines and groups auto-version packages in Creator.

    └──▷ HOW TO FIND IT
    Identify which container images qualify for long-term support to prioritize stable deployment targets.
    📍View image metadata in Minimus UI or via API; look for the new LTS label alongside EOL dates.
    Prioritize auto-versioned packages when building private images for common runtimes in Minimus Creator.
    📍In the package selector, look for grouped families with auto-version at the top of the list.
    • Adds LTS (Long-Term-Support) status indicators to image lines alongside existing End of Life (EOL) indications to help plan deployments.
    • Groups package families with the auto-version option at the top of the selector display in Minimus Creator for Ruby, Python, and PHP.

    2 details in Everything

19. March 1 2026 Mar 1, 2026 · release notes

    Minimus adds EOL indications for image lines, Creator build status visibility, Mongo-Hardened images, and Ruby auto-versioning.

    • EOL indicators appear in the image line menu and changelog view, showing exact end-of-life dates via hover.
    • Creator Status view now displays success/failure status for private image builds.

    2 details in Everything

20. February 22 2026 Feb 22, 2026 · release notes

    Minimus adds Helm chart signature verification via Cosign, image descriptions in private galleries, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. role management hints, and official FIPS 140-3FIPS 140-3A US federal standard, maintained by NIST, that defines requirements for cryptographic modules used in government systems. Cyber tools target it to satisfy procurement mandates requiring validated crypto. logos.

    • Add cosign verification support for Minimus Helm charts to ensure artifact integrity.
    • Add image descriptions field to private gallery images for organization and context capture.
    • Add helpful hints on user configuration pages to guide SAML role management for multi-group assignments.

    3 details in Everything

21. February 15 2026 Feb 15, 2026 · release notes

    Minimus adds session-persistent recent searches and recently added sort to gallery

    └──▷ HOW TO FIND IT
    Retrieve previous search context instantly in the browser UI
    📍In the gallery, type in the search bar and select from Recent searches
    Filter the gallery to view only the newest image uploads
    📍In the gallery, switch to the recently added sorting option
    • Gallery Search Enhancement Recent searches at your fingertips Dive back into your recent image searches at any time, even between sessions. Your last 10 searches are available from the search bar so that you can freely explore the Minimus gallery without fear of losing your context.
    • Gallery Sorting Enhancement Discover when images were first added Easily see when images were first added to the Minimus image gallery. Switch to the recently added sorting option to see the exact date when the image first became available by Minimus.

    2 details in Everything

22. February 1 2026 Feb 1, 2026 · release notes

    Minimus adds SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. group support for Azure, Google, Okta; new FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. CMVP certs

    └──▷ HOW TO FIND IT
    Enable SAML group-based access control for Azure or Google providers.
    📍Navigate to Settings › SAML Configuration in the console, then enable the SAML Groups toggle.
    Verify FIPS compliance status for Java and BoringCrypto modules.
    📍Check the compliance dashboard to view separate certificate details for FIPS module 5142 (Java) and 5104 (BoringCrypto).
    • Added support for SAML groups in role-based access controlrole-based access controlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for Azure, Google, and Okta identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
    • Introduced toggle for enabling SAML groups configuration in the SAML configuration form.
    • Acquired FIPS CMVP certificate 5142 for Java and certificate 5104 for BoringCrypto modules.

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Private images moved to my images category and no longer appear at the top of the general gallery.
23. January 18 2026 Jan 18, 2026 · release notes

    Minimus adds File Bundles, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. groups, Activity Log, and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Postgres images

    └──▷ HOW TO FIND IT
    Use File Bundles to update certificates for all private images at once.
    📍In the Minimus console, go to File Bundles and upload your certificate bundle; new versions trigger automatic image builds.
    Assign roles to control access to private images and user management.
    📍In User Management, assign viewer, operator, or admin roles based on RBAC requirements.
    Monitor team activity including logins and image changes.
    📍View the Activity Log to see when users logged in/out, created/updated images, or were added/removed.
    • Adds File Bundles to centrally manage certificates and file bundles for private images with versioning that triggers automatic builds.
    • Adds User Roles (viewer, operator, admin) to support RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for creating/editing images and managing users.
    • Adds Activity Log to audit user logins, image creation/updates, and user membership changes.
    • Introduces CIS Postgres Hardened Images (Postgres-Hardened, Postgres-Hardened-FIPS) complying with CIS benchmarks.
    • Adds SAML groups support for managing SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. users.

    5 details in Everything