elasticsearch-exporter

Prometheus exporter for Elasticsearch and OpenSearch cluster, node and index health metrics. Shell-less static Go binary, signed, rebuilt daily.

Vulnerabilities
None
Compressed size
6.8 MB
Architectures
amd64, arm64
Default user
nonroot (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest
Repository
ghcr.io/rtvkiz/minimal-elasticsearch-exporter
Digest
sha256:c7a726fc401ba40592d15dc1eb293e1cf98b4d814cfbfb83e67c3041e9b1e4d4
Built at
2026-11-12T08:15:51Z
Primary package
elasticsearch-exporter
Entrypoint
/usr/bin/elasticsearch_exporter
User
nonroot (65532)
Working dir
/tmp
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binHOME=/tmp
Labels
org.opencontainers.image.titleminimal-elasticsearch-exporter
org.opencontainers.image.descriptionHardened shell-less Elasticsearch Exporter built from source via melange with CVE patches on every rebuild
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/elasticsearch-exporter
org.opencontainers.image.licensesApache-2.0
TagPullPublished
1 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1 2026-11-12
1.11 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11 2026-11-12
1.11.0-r0 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0 2026-11-12
1.11.0-r0-20261112 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest 2026-11-12
1-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1-dev 2026-11-12
1.11-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11-dev 2026-11-12
1.11.0-r0-20261112-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261112-dev 2026-11-12
1.11.0-r0-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest-dev 2026-11-12
1.11.0-r0-20261111-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261111-dev 2026-11-11
1.11.0-r0-20261111 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261111 2026-11-11
1.11.0-r0-20261110 ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261110 2026-11-10
1.11.0-r0-20261110-dev ghcr.io/rtvkiz/minimal-elasticsearch-exporter:1.11.0-r0-20261110-dev 2026-11-10

14 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
elasticsearch-exporter1.11.0-r0Apache-2.0
images/elasticsearch-exporter/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
sha256:8ef1625103eeee89da6da62a77cbd7d83a42d3ea89b8597927ffb2794ec470d8sha256:8ef1625103eeee89da6da62a77cbd7d83a42d3ea89b8597927ffb2794ec470d8—
sha256:ce8b90b2fbd18aa2a933ee754c54ffc516a4d5a662f6cf576adf28a00cbd3f1f20230201—
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-elasticsearch-exporter:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Observability images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.