phpmyadmin

phpMyAdmin web administration for MySQL and MariaDB on PHP-FPM. Env-configured, setup wizard removed, shell-less and non-root, signed and rebuilt daily.

Vulnerabilities
Compressed size
37 MB
Architectures
amd64, arm64
Default user
phpmyadmin (65532)
Last built
today

Pull this image

docker pull ghcr.io/rtvkiz/minimal-phpmyadmin:latest
Repository
ghcr.io/rtvkiz/minimal-phpmyadmin
Digest
sha256:9755a95a355c5bb55556012fa0afd5e89ea845b4a382ab92f3b6c4088f781a69
Built at
2026-11-12T08:15:58Z
Primary package
phpmyadmin
Entrypoint
/sbin/tini -- /usr/bin/php-fpm --nodaemonize
User
phpmyadmin (65532)
Working dir
/usr/share/phpmyadmin
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/binHOME=/tmpPHP_INI_SCAN_DIR=/etc/phpmyadmin/php.dPMA_HOST=dbPMA_PORT=3306
Labels
org.opencontainers.image.titleminimal-phpmyadmin
org.opencontainers.image.descriptionHardened shell-less phpMyAdmin (PHP-FPM) from the official release
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/phpmyadmin
org.opencontainers.image.licensesGPL-2.0-only
TagPullPublished
5 ghcr.io/rtvkiz/minimal-phpmyadmin:5 2026-11-12
5.2 ghcr.io/rtvkiz/minimal-phpmyadmin:5.2 2026-11-12
5.2.3-r0 ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0 2026-11-12
5.2.3-r0-20261112 ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261112 2026-11-12
latest ghcr.io/rtvkiz/minimal-phpmyadmin:latest 2026-11-12
5-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5-dev 2026-11-12
5.2-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5.2-dev 2026-11-12
5.2.3-r0-20261112-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261112-dev 2026-11-12
5.2.3-r0-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-dev 2026-11-12
latest-dev ghcr.io/rtvkiz/minimal-phpmyadmin:latest-dev 2026-11-12
5.2.3-r0-20261111 ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261111 2026-11-11
5.2.3-r0-20261111-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261111-dev 2026-11-11
5.2.3-r0-20261110 ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261110 2026-11-10
5.2.3-r0-20261110-dev ghcr.io/rtvkiz/minimal-phpmyadmin:5.2.3-r0-20261110-dev 2026-11-10

270 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20261020MPL-2.0 AND MIT
aomv3.15.3BSD-2-Clause
aom-libs3.15.3-r0BSD-2-Clause
aom-libs3.15.3-r0BSD-2-Clause
aom-libs3.15.3-r0—
aom.yaml7355fa225ab944821db3a5133166201e0c9b0615Apache-2.0
brotliv1.2.1MIT
brotli.yamlf5ef816d1cb2bd0e165a402c4e8a4c4622464bf3Apache-2.0
bzip21.0.8-r31bzip2-1.0.6
bzip21.0.8-r31bzip2-1.0.6
bzip21.0.8-r31—
bzip2.yaml6ea997c2746016cbc0225ce27cb992c09feefd2aApache-2.0
ca-certificates-bundle20261020-r0MPL-2.0 AND MIT
ca-certificates-bundle20261020-r0(MPL-2.0 AND MIT)
ca-certificates-bundle20261020-r0—
ca-certificates.yaml8061afafa65af5a9026707a8880e14120dd6f4a0Apache-2.0
dav1d.yaml09717c4068c4ce7921a82442f3bd506eb3a3aa21Apache-2.0
freetype2.14.3-r7FTL OR GPL-2.0-or-later
freetype2.14.3-r7(FTL OR GPL-2.0-or-later)
freetype2.14.3-r7—
freetype.yaml6ff29abe842715e2edb5412c279fa078916c86deApache-2.0
freetype/freetypeVER-2-14-3FTL OR GPL-2.0-or-later
gcc.yaml4d188060cbd00821a95f1ef60605da4817e781bbApache-2.0
git/bzip2bzip2-1.0.8bzip2-1.0.6
git/readlinereadline-8.3GPL-3.0-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16LGPL-2.1-or-later
glibc-2.442.44-r16—
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16LGPL-2.1-or-later
glibc-2.44-locale-posix2.44-r16—
glibc-2.44.yaml69c2b75e0711c38be3c5881e3a141667ccf54341Apache-2.0
GNOME/libxml2v2.15.4MIT
gnutools/gccreleases/gcc-16.2.0GPL-3.0-or-later WITH GCC-exception-3.1
gnutools/glibc47e2b570410fab606de29f550534a721184852c3LGPL-2.1-or-later
images/phpmyadmin/melange.yaml862101ee7af52b6dfb7db319fbf7c11793a3d433—
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16LGPL-2.1-or-later
ld-linux-2.442.44-r16—
libavif1.4.2-r3BSD-2-Clause
libavifv1.4.2BSD-2-Clause
libavif1.4.2-r3BSD-2-Clause
libavif1.4.2-r3—
libavif.yamla6d1867ea573a56972ef010fc4b2412663352a03Apache-2.0
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3MIT
libbrotlicommon11.2.1-r3—
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3MIT
libbrotlidec11.2.1-r3—
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3MIT
libbrotlienc11.2.1-r3—
libbz2-11.0.8-r31bzip2-1.0.6
libbz2-11.0.8-r31bzip2-1.0.6
libbz2-11.0.8-r31—
libdav1d1.5.4-r4BSD-2-Clause
libdav1d1.5.4-r4BSD-2-Clause
libdav1d1.5.4-r4—
libgcc16.2.0-r3GPL-3.0-or-later WITH GCC-exception-3.1
libgcc16.2.0-r3(GPL-3.0-or-later WITH GCC-exception-3.1)
libgcc16.2.0-r3—
libjpeg-turbo3.2.1-r0BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.1BSD-3-Clause AND IJG AND Zlib
libjpeg-turbo3.2.1-r0(BSD-3-Clause AND IJG AND Zlib)
libjpeg-turbo3.2.1-r0—
libjpeg-turbo.yaml2d92ccc84a18a2e9505e5320d6e31166925aaf65Apache-2.0
libpcre2-8-010.49-r3BSD-3-Clause
libpcre2-8-010.49-r3BSD-3-Clause
libpcre2-8-010.49-r3—
libpngv1.6.59libpng-2.0
libpng.yamlb9898dbb7125f3678bc8c6cd9e7a43d9d9d2c518Apache-2.0
libpng16-161.6.59-r2libpng-2.0
libpng16-161.6.59-r2libpng-2.0
libpng16-161.6.59-r2—
libsodium1.0.22-r4ISC
libsodium1.0.22-RELEASEISC
libsodium1.0.22-r4ISC
libsodium1.0.22-r4—
libsodium.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libwebp1.6.0-r7BSD-3-Clause
libwebpv1.6.0BSD-3-Clause
libwebp1.6.0-r7BSD-3-Clause
libwebp1.6.0-r7—
libwebp.yamlca390f44f04f83b14909165c760063f26b425375Apache-2.0
libx11-61.8.14-r4XFree86-1.1
libx11-61.8.14-r4XFree86-1.1
libx11-61.8.14-r4—
libx11-data1.8.14-r4XFree86-1.1
libx11-data1.8.14-r4XFree86-1.1
libx11-data1.8.14-r4—
libx11.yamle286b020d6a3a526b72944884af2dded31b6363aApache-2.0
libxau1.0.12-r11MIT
libxau1.0.12-r11MIT
libxau1.0.12-r11—
libxau.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxcb1.17.0-r19MIT
libxcb1.17.0-r19MIT
libxcb1.17.0-r19—
libxcb.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxdmcp1.1.5-r14MIT
libxdmcp1.1.5-r14MIT
libxdmcp1.1.5-r14—
libxdmcp.yaml491b184c82ef2868d73a46a98997db789342ff15Apache-2.0
libxml2-162.15.4-r2MIT
libxml2-162.15.4-r2MIT
libxml2-162.15.4-r2—
libxml2.yaml0d1cb8462683e2c06d7591b8b4ad4d1f2797a0f7Apache-2.0
libxpm-libs3.5.20-r0MIT
libxpm-libs3.5.20-r0MIT
libxpm-libs3.5.20-r0—
libxpm.yaml241a1e3a5dafe7521892d70bc4bdcd3ada5683c6Apache-2.0
libzip1.12.1-r0BSD-3-Clause
libzipv1.12.1BSD-3-Clause
libzip1.12.1-r0BSD-3-Clause
libzip1.12.1-r0—
libzip.yaml34cc8f6e87c5755c27bd25aa914d5abdce87ead7Apache-2.0
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0MIT
ncurses6.6.20261107-r0—
ncurses-snapshotsv6_6_20261107MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0MIT
ncurses-terminfo-base6.6.20261107-r0—
ncurses.yaml57b90c0084b0bc101663cdfcaa44f4ce83312443Apache-2.0
oniguruma6.9.10-r7BSD-2-Clause
onigurumav6.9.10BSD-2-Clause
oniguruma6.9.10-r7BSD-2-Clause
oniguruma6.9.10-r7—
oniguruma.yaml40e94215f5dcd578d6e737bd1b126cdbb5acf9cbApache-2.0
opensslopenssl-4.1.0Apache-2.0
opensslopenssl-4.0.3Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8Apache-2.0
openssl-4.0-libcrypto4.0.3-r8—
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8Apache-2.0
openssl-4.0-libssl4.0.3-r8—
openssl-4.0.yaml53fb2f6751f832fa61ddba06cb8a40dbba5f409fApache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0Apache-2.0
openssl-provider-legacy-allowed4.1.0-r0—
openssl-provider-legacy-allowed.yamlaeae4801330be6fd269d5ed5640dc37b58ccab09Apache-2.0
pcre2pcre2-10.49BSD-3-Clause
pcre2.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
php-8.3-ctype8.3.36-r1PHP-3.01
php-8.3-ctype8.3.36-r1PHP-3.01
php-8.3-ctype8.3.36-r1—
php-8.3-ctype-config8.3.36-r1PHP-3.01
php-8.3-ctype-config8.3.36-r1PHP-3.01
php-8.3-ctype-config8.3.36-r1—
php-8.3-dom8.3.36-r1PHP-3.01
php-8.3-dom8.3.36-r1PHP-3.01
php-8.3-dom8.3.36-r1—
php-8.3-dom-config8.3.36-r1PHP-3.01
php-8.3-dom-config8.3.36-r1PHP-3.01
php-8.3-dom-config8.3.36-r1—
php-8.3-fpm8.3.36-r1PHP-3.01
php-8.3-fpm8.3.36-r1PHP-3.01
php-8.3-fpm8.3.36-r1—
php-8.3-fpm-config8.3.36-r1PHP-3.01
php-8.3-fpm-config8.3.36-r1PHP-3.01
php-8.3-fpm-config8.3.36-r1—
php-8.3-gd8.3.36-r1PHP-3.01
php-8.3-gd8.3.36-r1PHP-3.01
php-8.3-gd8.3.36-r1—
php-8.3-gd-config8.3.36-r1PHP-3.01
php-8.3-gd-config8.3.36-r1PHP-3.01
php-8.3-gd-config8.3.36-r1—
php-8.3-iconv8.3.36-r1PHP-3.01
php-8.3-iconv8.3.36-r1PHP-3.01
php-8.3-iconv8.3.36-r1—
php-8.3-iconv-config8.3.36-r1PHP-3.01
php-8.3-iconv-config8.3.36-r1PHP-3.01
php-8.3-iconv-config8.3.36-r1—
php-8.3-mbstring8.3.36-r1PHP-3.01
php-8.3-mbstring8.3.36-r1PHP-3.01
php-8.3-mbstring8.3.36-r1—
php-8.3-mbstring-config8.3.36-r1PHP-3.01
php-8.3-mbstring-config8.3.36-r1PHP-3.01
php-8.3-mbstring-config8.3.36-r1—
php-8.3-mysqli8.3.36-r1PHP-3.01
php-8.3-mysqli8.3.36-r1PHP-3.01
php-8.3-mysqli8.3.36-r1—
php-8.3-mysqli-config8.3.36-r1PHP-3.01
php-8.3-mysqli-config8.3.36-r1PHP-3.01
php-8.3-mysqli-config8.3.36-r1—
php-8.3-mysqlnd8.3.36-r1PHP-3.01
php-8.3-mysqlnd8.3.36-r1PHP-3.01
php-8.3-mysqlnd8.3.36-r1—
php-8.3-mysqlnd-config8.3.36-r1PHP-3.01
php-8.3-mysqlnd-config8.3.36-r1PHP-3.01
php-8.3-mysqlnd-config8.3.36-r1—
php-8.3-opcache8.3.36-r1PHP-3.01
php-8.3-opcache8.3.36-r1PHP-3.01
php-8.3-opcache8.3.36-r1—
php-8.3-opcache-config8.3.36-r1PHP-3.01
php-8.3-opcache-config8.3.36-r1PHP-3.01
php-8.3-opcache-config8.3.36-r1—
php-8.3-openssl8.3.36-r1PHP-3.01
php-8.3-openssl8.3.36-r1PHP-3.01
php-8.3-openssl8.3.36-r1—
php-8.3-openssl-config8.3.36-r1PHP-3.01
php-8.3-openssl-config8.3.36-r1PHP-3.01
php-8.3-openssl-config8.3.36-r1—
php-8.3-simplexml8.3.36-r1PHP-3.01
php-8.3-simplexml8.3.36-r1PHP-3.01
php-8.3-simplexml8.3.36-r1—
php-8.3-simplexml-config8.3.36-r1PHP-3.01
php-8.3-simplexml-config8.3.36-r1PHP-3.01
php-8.3-simplexml-config8.3.36-r1—
php-8.3-sodium8.3.36-r1PHP-3.01
php-8.3-sodium8.3.36-r1PHP-3.01
php-8.3-sodium8.3.36-r1—
php-8.3-sodium-config8.3.36-r1PHP-3.01
php-8.3-sodium-config8.3.36-r1PHP-3.01
php-8.3-sodium-config8.3.36-r1—
php-8.3-xml8.3.36-r1PHP-3.01
php-8.3-xml8.3.36-r1PHP-3.01
php-8.3-xml8.3.36-r1—
php-8.3-xml-config8.3.36-r1PHP-3.01
php-8.3-xml-config8.3.36-r1PHP-3.01
php-8.3-xml-config8.3.36-r1—
php-8.3-xmlwriter8.3.36-r1PHP-3.01
php-8.3-xmlwriter8.3.36-r1PHP-3.01
php-8.3-xmlwriter8.3.36-r1—
php-8.3-xmlwriter-config8.3.36-r1PHP-3.01
php-8.3-xmlwriter-config8.3.36-r1PHP-3.01
php-8.3-xmlwriter-config8.3.36-r1—
php-8.3-zip8.3.36-r1PHP-3.01
php-8.3-zip8.3.36-r1PHP-3.01
php-8.3-zip8.3.36-r1—
php-8.3-zip-config8.3.36-r1PHP-3.01
php-8.3-zip-config8.3.36-r1PHP-3.01
php-8.3-zip-config8.3.36-r1—
php-8.3.yaml4873d8db3024a03f9c8ff41a57902228af7eaddfApache-2.0
php-srcphp-8.3.36PHP-3.01
phpmyadmin5.2.3-r0GPL-2.0-only
readline8.3-r3GPL-3.0-or-later
readline8.3-r3GPL-3.0-or-later
readline8.3-r3—
readline.yaml20a5359ac0a7a6aca23efa343f0f29c8d3ea1453Apache-2.0
sha256:b38adb703d80c6102482ae1478e41739f9f4cdce050b760d3a146d6c662bd750sha256:b38adb703d80c6102482ae1478e41739f9f4cdce050b760d3a146d6c662bd750—
sha256:e8190c49b07354c1bf98ade7d1e322b172594617a0fc59a765d469291b68161020230201—
sqlite3.54.1—
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0blessing
sqlite-libs3.54.1-r0—
sqlite.yamlb0ca8c95606371be2557980059c10b34df30fa9fApache-2.0
tini0.19.0-r26MIT
tiniv0.19.0MIT
tini0.19.0-r26MIT
tini0.19.0-r26—
tini.yamled6708a41ae306d9a14b1e088a7590c8278a9babApache-2.0
videolan/dav1d1.5.4BSD-2-Clause
wolfi20230201—
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31MIT
wolfi-baselayout20230201-r31—
wolfi-baselayout.yamled415005c84750f03c4a9252137813734a224ae7Apache-2.0
xorg/lib/libx11libX11-1.8.14XFree86-1.1
xorg/lib/libxaulibXau-1.0.12MIT
xorg/lib/libxcblibxcb-1.17.0MIT
xorg/lib/libxdmcplibXdmcp-1.1.5MIT
xorg/lib/libxpmlibXpm-3.5.20MIT
zlib1.3.2.1_rc20260921-r2MPL-2.0 AND MIT
zlib767c4c947852e143f582c85f14cf573411df1b35MPL-2.0 AND MIT
zlib1.3.2.1_rc20260921-r2(MPL-2.0 AND MIT)
zlib1.3.2.1_rc20260921-r2—
zlib.yaml5aeb575ed7ca64fb21dfda042e170d08f1654bbcApache-2.0
1 critical7 high11 medium4 low 16 fixable 7 need review
CVESeverityPackageInstalledFixed in
GHSA-7p85-w9px-jpjp Critical twig/twig v3.11.3 3.26.0
CVE-2026-119426 High phpmyadmin 5.2.3-r0 —
CVE-2026-119427 High phpmyadmin 5.2.3-r0 —
CVE-2026-119561 High phpmyadmin 5.2.3-r0 —
CVE-2026-119562 High phpmyadmin 5.2.3-r0 —
GHSA-2q52-x2ff-qgfr High twig/twig v3.11.3 3.26.0
GHSA-529h-vh3j-85hq High twig/twig v3.11.3 3.27.0
GHSA-pr2w-4gpj-cpq4 High twig/twig v3.11.3 3.26.0
CVE-2026-119428 Medium phpmyadmin 5.2.3-r0 —
CVE-2026-119429 Medium phpmyadmin 5.2.3-r0 —
CVE-2026-119563 Medium phpmyadmin 5.2.3-r0 —
GHSA-24x9-r6q4-q93w Medium twig/twig v3.11.3 3.26.0
GHSA-5v5v-ww74-355v Medium twig/twig v3.11.3 3.27.0
GHSA-6qh9-h6wf-jgqc Medium symfony/cache v5.4.46 5.4.52
GHSA-7fxw-r6jv-74c8 Medium twig/twig v3.11.3 3.26.0
GHSA-8x9c-rmqh-456c Medium twig/twig v3.11.3 3.27.0
GHSA-h8vq-8gpg-mhcg Medium twig/twig v3.11.3 3.27.0
GHSA-mrfv-m5wm-5w6w Medium paragonie/sodium_compat v1.23.0 1.24.0
GHSA-r39x-jcww-82v6 Medium symfony/process v5.4.47 5.4.51
GHSA-2g2g-8p8h-fgwm Low twig/twig v3.11.3 3.26.0
GHSA-4j38-f5cw-54h7 Low twig/twig v3.11.3 3.26.0
GHSA-p42q-9prx-q5wq Low twig/twig v3.11.3 3.27.0
GHSA-vcc8-phrv-43wj Low twig/twig v3.11.3 3.26.0

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-phpmyadmin:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-phpmyadmin:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-phpmyadmin:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Apps images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.