kaniko Kubernetes, CI & IaC
Shell-less Kaniko container image builder (executor) built from source via melange.
Pull this image
docker pull ghcr.io/rtvkiz/minimal-kaniko:latestdocker pull ghcr.io/rtvkiz/minimal-kaniko:latest-devThe -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.
Details
- Repository
- ghcr.io/rtvkiz/minimal-kaniko
- Size (compressed)
- 55 MB
- Built
- 2026-09-29T00:33:28Z (today)
- Architectures
- x86_64, aarch64
- Primary package
- kaniko
- Entrypoint
- /kaniko/executor
- User
- root
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-kaniko org.opencontainers.image.description Hardened shell-less Kaniko container image builder (executor) built from source via melange with daily CVE patches org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/kaniko org.opencontainers.image.licenses Apache-2.0
- Entrypoint
- /kaniko/executor
- User
- root
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
-
org.opencontainers.image.title minimal-kaniko-dev org.opencontainers.image.description Dev variant of minimal-kaniko: same executor + shell + curl/openssl/jq/git. Not for production. org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/kaniko org.opencontainers.image.licenses Apache-2.0 dev.minimal.variant dev
| Tag | Pull | Published |
|---|---|---|
| 1 | ghcr.io/rtvkiz/minimal-kaniko:1 | 2026-09-29 |
| 1.24 | ghcr.io/rtvkiz/minimal-kaniko:1.24 | 2026-09-29 |
| 1.24.0-r0 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0 | 2026-09-29 |
| 1.24.0-r0-20260929 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260929 | 2026-09-29 |
| latest | ghcr.io/rtvkiz/minimal-kaniko:latest | 2026-09-29 |
| 1-dev | ghcr.io/rtvkiz/minimal-kaniko:1-dev | 2026-09-29 |
| 1.24-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24-dev | 2026-09-29 |
| 1.24.0-r0-20260929-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260929-dev | 2026-09-29 |
| 1.24.0-r0-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-dev | 2026-09-29 |
| latest-dev | ghcr.io/rtvkiz/minimal-kaniko:latest-dev | 2026-09-29 |
| 1.24.0-r0-20260928 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260928 | 2026-09-28 |
| 1.24.0-r0-20260928-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260928-dev | 2026-09-28 |
| 1.24.0-r0-20260927 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260927 | 2026-09-27 |
| 1.24.0-r0-20260927-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260927-dev | 2026-09-27 |
| 1.24.0-r0-20260926 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260926 | 2026-09-26 |
| 1.24.0-r0-20260926-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260926-dev | 2026-09-26 |
| 1.24.0-r0-20260925 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260925 | 2026-09-25 |
| 1.24.0-r0-20260925-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260925-dev | 2026-09-25 |
| 1.24.0-r0-20260924 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260924 | 2026-09-24 |
| 1.24.0-r0-20260924-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260924-dev | 2026-09-24 |
| 1.24.0-r0-20260923 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260923 | 2026-09-23 |
| 1.24.0-r0-20260923-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260923-dev | 2026-09-23 |
| 1.24.0-r0-20260922 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260922 | 2026-09-22 |
| 1.24.0-r0-20260922-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260922-dev | 2026-09-22 |
| 1.24.0-r0-20260921 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260921 | 2026-09-21 |
| 1.24.0-r0-20260921-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260921-dev | 2026-09-21 |
| 1.24.0-r0-20260920 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260920 | 2026-09-20 |
| 1.24.0-r0-20260920-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260920-dev | 2026-09-20 |
| 1.24.0-r0-20260919 | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260919 | 2026-09-19 |
| 1.24.0-r0-20260919-dev | ghcr.io/rtvkiz/minimal-kaniko:1.24.0-r0-20260919-dev | 2026-09-19 |
14 packages in the image, resolved from the SPDX SBOM.
| Package | Version | License |
|---|---|---|
| alpine/ca-certificates | 20260909 | MPL-2.0 AND MIT |
| ca-certificates-bundle | 20260909-r1 | MPL-2.0 AND MIT |
| ca-certificates-bundle | 20260909-r1 | (MPL-2.0 AND MIT) |
| ca-certificates-bundle | 20260909-r1 | — |
| ca-certificates.yaml | ee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7 | Apache-2.0 |
| images/kaniko/melange.yaml | 1bce6e63ea891bcced1fda6bdc6813ced3474c4e | — |
| kaniko | 1.24.0-r0 | Apache-2.0 |
| sha256:ac3272dcb14aad5de45a28d64c30bd1d30bf52738670a4d1416dde63856ebe19 | sha256:ac3272dcb14aad5de45a28d64c30bd1d30bf52738670a4d1416dde63856ebe19 | — |
| sha256:c56e671d6021354614829c5431c983dc1df4fd27cd1d8dcd6c435f5faca5e285 | 20230201 | — |
| wolfi | 20230201 | — |
| wolfi-baselayout | 20230201-r30 | MIT |
| wolfi-baselayout | 20230201-r30 | MIT |
| wolfi-baselayout | 20230201-r30 | — |
| wolfi-baselayout.yaml | a4472f6292a5e48d6d611bf24c6e119b1a483e66 | Apache-2.0 |
7 critical23 high15 medium5 low 117 fixable 104 need review
| CVE | Severity | Package | Installed | Fixed in |
|---|---|---|---|---|
| CVE-2024-41110 | Critical | kaniko | 1.24.0-r0 | 1.25.3-r2 |
| CVE-2026-33747 | Critical | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| CVE-2026-45570 | Critical | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| CVE-2026-50195 | Critical | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| CVE-2026-53492 | Critical | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GO-2026-5064 | Critical | github.com/containerd/containerd | v1.7.36 | — |
| GO-2026-5338 | Critical | github.com/containerd/containerd | v1.7.36 | — |
| CVE-2024-25621 | High | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| CVE-2025-47907 | High | kaniko | 1.24.0-r0 | 1.25.1-r2 |
| CVE-2026-17106 | High | kaniko | 1.24.0-r0 | 1.25.18-r5 |
| CVE-2026-24051 | High | kaniko | 1.24.0-r0 | 1.25.10-r1 |
| CVE-2026-25679 | High | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| CVE-2026-27145 | High | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| CVE-2026-33748 | High | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| CVE-2026-34986 | High | kaniko | 1.24.0-r0 | 1.25.12-r2 |
| CVE-2026-39821 | High | kaniko | 1.24.0-r0 | 1.25.15-r6 |
| CVE-2026-39883 | High | kaniko | 1.24.0-r0 | 1.25.12-r5 |
| CVE-2026-41506 | High | kaniko | 1.24.0-r0 | 1.25.13-r1 |
| CVE-2026-45022 | High | kaniko | 1.24.0-r0 | 1.25.14-r2 |
| CVE-2026-46680 | High | kaniko | 1.24.0-r0 | 1.25.15-r2 |
| CVE-2026-53488 | High | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| CVE-2026-71556 | High | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| CVE-2026-84304 | High | kaniko | 1.24.0-r0 | 1.25.19-r2 |
| CVE-2026-84445 | High | kaniko | 1.24.0-r0 | 1.25.19-r4 |
| GHSA-4c29-8rgm-jvjj | High | github.com/moby/buildkit | v0.22.0 | 0.28.1 |
| GHSA-4vrq-3vrq-g6gg | High | github.com/moby/buildkit | v0.22.0 | 0.28.1 |
| GHSA-hfg8-hc9c-6c3h | High | github.com/moby/go-archive | v0.1.0 | 0.3.0 |
| GHSA-rg2x-37c3-w2rh | High | github.com/docker/docker | v28.1.1+incompatible | — |
| GHSA-x86f-5xw2-fm2r | High | github.com/docker/docker | v28.1.1+incompatible | — |
| GO-2026-4887 | High | github.com/docker/docker | v28.1.1+incompatible | — |
| CVE-2025-64329 | Medium | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| CVE-2026-34165 | Medium | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| CVE-2026-41178 | Medium | kaniko | 1.24.0-r0 | 1.25.16-r1 |
| CVE-2026-42505 | Medium | kaniko | 1.24.0-r0 | 1.25.16-r2 |
| CVE-2026-42507 | Medium | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| CVE-2026-45571 | Medium | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| CVE-2026-47262 | Medium | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| CVE-2026-53489 | Medium | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| CVE-2026-53495 | Medium | kaniko | 1.24.0-r0 | 1.25.19-r5 |
| CVE-2026-61711 | Medium | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| CVE-2026-71557 | Medium | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| GHSA-7236-3392-c5c6 | Medium | github.com/moby/buildkit | v0.22.0 | 0.31.1 |
| GHSA-pxq6-2prw-chj9 | Medium | github.com/docker/docker | v28.1.1+incompatible | — |
| GHSA-vp62-88p7-qqf5 | Medium | github.com/docker/docker | v28.1.1+incompatible | — |
| GO-2026-5622 | Medium | github.com/containerd/containerd | v1.7.36 | — |
| CVE-2026-27139 | Low | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| CVE-2026-33762 | Low | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| CVE-2026-61712 | Low | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| CVE-2026-81870 | Low | kaniko | 1.24.0-r0 | 1.25.19-r6 |
| GHSA-72x6-4j93-7w86 | Low | github.com/moby/buildkit | v0.22.0 | 0.31.1 |
| GHSA-2v4p-qf9q-27wj | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r4 |
| GHSA-33vj-92qq-66hc | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GHSA-389r-gv7p-r3rp | Unknown | kaniko | 1.24.0-r0 | 1.25.14-r2 |
| GHSA-3xc5-wrhm-f963 | Unknown | kaniko | 1.24.0-r0 | 1.25.13-r1 |
| GHSA-4279-q6mj-392r | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| GHSA-4c29-8rgm-jvjj | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| GHSA-4vrq-3vrq-g6gg | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| GHSA-5wrp-cwcj-q835 | Unknown | kaniko | 1.24.0-r0 | 1.25.16-r1 |
| GHSA-7236-3392-c5c6 | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| GHSA-72x6-4j93-7w86 | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| GHSA-78h2-9frx-2jm8 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r2 |
| GHSA-7jxh-36q5-gcqv | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r5 |
| GHSA-8wmf-6v46-5gfg | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r6 |
| GHSA-9h8m-3fm2-qjrq | Unknown | kaniko | 1.24.0-r0 | 1.25.10-r1 |
| GHSA-crhj-59gh-8x96 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| GHSA-cvxm-645q-p574 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GHSA-ff52-ph69-cf7x | Unknown | kaniko | 1.24.0-r0 | 1.25.16-r2 |
| GHSA-fqw6-gf59-qr4w | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r2 |
| GHSA-gm2x-2g9h-ccm8 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| GHSA-h3gm-q7m7-mp28 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| GHSA-hc8v-wwc9-vgxm | Unknown | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| GHSA-hfg8-hc9c-6c3h | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r5 |
| GHSA-hfvc-g4fc-pqhx | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r5 |
| GHSA-j3gx-2473-5fp8 | Unknown | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| GHSA-j5pm-7495-qmr3 | Unknown | kaniko | 1.24.0-r0 | 1.25.1-r2 |
| GHSA-jhf3-xxhw-2wpp | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| GHSA-jpcc-p29g-p8mq | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| GHSA-m6hq-p25p-ffr2 | Unknown | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| GHSA-m7cr-m3pv-hgrp | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| GHSA-pwhc-rpq9-4c8w | Unknown | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| GHSA-qgq7-7hm3-q39j | Unknown | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| GHSA-rgh6-rfwx-v388 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GHSA-rv83-g57w-fr8j | Unknown | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| GHSA-v23v-6jw2-98fq | Unknown | kaniko | 1.24.0-r0 | 1.25.3-r2 |
| GHSA-vp52-pcj8-j9qc | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r2 |
| GHSA-w2q5-6q6x-x959 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r6 |
| GHSA-xhf5-7wjv-pqxp | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| GHSA-xmrv-pmrh-hhx2 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r6 |
| GO-2024-3005 | Unknown | kaniko | 1.24.0-r0 | 1.25.3-r2 |
| GO-2025-3849 | Unknown | kaniko | 1.24.0-r0 | 1.25.1-r2 |
| GO-2025-4100 | Unknown | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| GO-2025-4108 | Unknown | kaniko | 1.24.0-r0 | 1.25.4-r0 |
| GO-2026-4394 | Unknown | kaniko | 1.24.0-r0 | 1.25.10-r1 |
| GO-2026-4601 | Unknown | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| GO-2026-4602 | Unknown | kaniko | 1.24.0-r0 | 1.25.11-r1 |
| GO-2026-4858 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| GO-2026-4859 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r1 |
| GO-2026-4909 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| GO-2026-4910 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r3 |
| GO-2026-4945 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r2 |
| GO-2026-5026 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r6 |
| GO-2026-5037 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| GO-2026-5039 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r5 |
| GO-2026-5064 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GO-2026-5074 | Unknown | kaniko | 1.24.0-r0 | 1.25.14-r2 |
| GO-2026-5105 | Unknown | kaniko | 1.24.0-r0 | 1.25.13-r1 |
| GO-2026-5158 | Unknown | kaniko | 1.24.0-r0 | 1.25.16-r1 |
| GO-2026-5336 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| GO-2026-5338 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GO-2026-5378 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r2 |
| GO-2026-5426 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r5 |
| GO-2026-5475 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| GO-2026-5496 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r1 |
| GO-2026-5622 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r9 |
| GO-2026-5758 | Unknown | kaniko | 1.24.0-r0 | 1.25.15-r10 |
| GO-2026-5764 | Unknown | kaniko | 1.24.0-r0 | 1.25.12-r6 |
| GO-2026-5856 | Unknown | kaniko | 1.24.0-r0 | 1.25.16-r2 |
| GO-2026-6213 | Unknown | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| GO-2026-6214 | Unknown | kaniko | 1.24.0-r0 | 1.25.17-r1 |
| GO-2026-6225 | Unknown | github.com/chrismellard/docker-credential-acr-env | v0.0.0-20230304212654-82a0ddb27589 | — |
| GO-2026-6253 | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r5 |
| GO-2026-6255 | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| GO-2026-6256 | Unknown | kaniko | 1.24.0-r0 | 1.25.18-r4 |
| GO-2026-6348 | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r2 |
| GO-2026-6443 | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r4 |
| GO-2026-6444 | Unknown | kaniko | 1.24.0-r0 | 1.25.19-r5 |
Everything is verifiable without an account. Copy and run:
Build provenance (SLSA v1.0, Build L2)
gh attestation verify oci://ghcr.io/rtvkiz/minimal-kaniko:latest --owner rtvkizCosign signature
cosign verify \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-kaniko:latestSBOM attestation (SPDX)
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-kaniko:latest \
| jq -r '.payload | @base64d | fromjson | .predicate'Signatures are logged in the public Rekor transparency log.
More Kubernetes, CI & IaC images
Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.