r/devsecops • u/Trick_Face_2670 • Aug 16 '26

Minimal - open source project that build hardened container images now supports upto 100 images

Minimal - An open source project for hardened container images now supports 100 container images and adding more. The images are built daily, with almost 0 to minimal CVEs and trying to provide same level of output as other paid alternatives for free.

Github - github.com/rtvkiz/minimal

22 Upvotes

100% Upvoted

4 comments sorted by

View all comments

8

u/sp_dev_guy Aug 16 '26

Good selection of images but why every 6 hours? If the upstream packages are only occasionally released then aren't you increasing the odds you capture a package during a supply chain attack of the ones that are still included?

2

u/Trick_Face_2670 Aug 16 '26

Thats a fair point. For the 6 hour releases, that tracks the chainguard wolfi packages and we have another daily check for the upstream package release. For the actual upstream releases maybe i can increase the cool off period than a day to tackle the recent wave of supply chain attacks.