← All images

regctl Kubernetes, CI & IaC

Shell-less regctl OCI registry client (regclient), built from source via melange.

Size 13 MB Arch x86_64, aarch64 User nonroot (65532) Updated today Upstream github.com/regclient/regclient

Pull this image

docker pull ghcr.io/rtvkiz/minimal-regctl:latest

Details

Repository
ghcr.io/rtvkiz/minimal-regctl
Size (compressed)
13 MB
Built
2026-09-29T00:39:44Z (today)
Architectures
x86_64, aarch64
Primary package
regctl
Entrypoint
/usr/bin/regctl
User
nonroot (65532)
Working dir
/
Architectures
x86_64, aarch64
Environment
PATH=/usr/bin:/bin
Labels
org.opencontainers.image.titleminimal-regctl
org.opencontainers.image.descriptionHardened shell-less regctl OCI registry client built from source via melange with daily CVE patches
org.opencontainers.image.urlhttps://github.com/rtvkiz/minimal
org.opencontainers.image.sourcehttps://github.com/rtvkiz/minimal/tree/main/images/regctl
org.opencontainers.image.licensesApache-2.0
TagPullPublished
0.11 ghcr.io/rtvkiz/minimal-regctl:0.11 2026-09-29
0.11.6-r0 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0 2026-09-29
0.11.6-r0-20260929 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260929 2026-09-29
latest ghcr.io/rtvkiz/minimal-regctl:latest 2026-09-29
0.11-dev ghcr.io/rtvkiz/minimal-regctl:0.11-dev 2026-09-29
0.11.6-r0-20260929-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260929-dev 2026-09-29
0.11.6-r0-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-dev 2026-09-29
latest-dev ghcr.io/rtvkiz/minimal-regctl:latest-dev 2026-09-29
0.11.6-r0-20260928 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260928 2026-09-28
0.11.6-r0-20260928-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260928-dev 2026-09-28
0.11.6-r0-20260927 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260927 2026-09-27
0.11.6-r0-20260927-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260927-dev 2026-09-27
0.11.6-r0-20260926 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260926 2026-09-26
0.11.6-r0-20260926-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260926-dev 2026-09-26
0.11.6-r0-20260925 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260925 2026-09-25
0.11.6-r0-20260925-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260925-dev 2026-09-25
0.11.6-r0-20260924 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260924 2026-09-24
0.11.6-r0-20260924-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260924-dev 2026-09-24
0.11.6-r0-20260923 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260923 2026-09-23
0.11.6-r0-20260923-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260923-dev 2026-09-23
0.11.6-r0-20260922 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260922 2026-09-22
0.11.6-r0-20260922-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260922-dev 2026-09-22
0.11.6-r0-20260921 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260921 2026-09-21
0.11.6-r0-20260921-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260921-dev 2026-09-21
0.11.6-r0-20260920 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260920 2026-09-20
0.11.6-r0-20260920-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260920-dev 2026-09-20
0.11.6-r0-20260919 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260919 2026-09-19
0.11.6-r0-20260919-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260919-dev 2026-09-19
0.11.6-r0-20260918 ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260918 2026-09-18
0.11.6-r0-20260918-dev ghcr.io/rtvkiz/minimal-regctl:0.11.6-r0-20260918-dev 2026-09-18

14 packages in the image, resolved from the SPDX SBOM.

PackageVersionLicense
alpine/ca-certificates20260909MPL-2.0 AND MIT
ca-certificates-bundle20260909-r1MPL-2.0 AND MIT
ca-certificates-bundle20260909-r1(MPL-2.0 AND MIT)
ca-certificates-bundle20260909-r1—
ca-certificates.yamlee3eac73dda22e8dd32fa5fb3e3a1712a6e812d7Apache-2.0
images/regctl/melange.yaml1bce6e63ea891bcced1fda6bdc6813ced3474c4e—
regctl0.11.6-r0Apache-2.0
sha256:ba4db754b18fadae3f83dd351d23a97aa767c1175b986735e05ac49fc550a36csha256:ba4db754b18fadae3f83dd351d23a97aa767c1175b986735e05ac49fc550a36c—
sha256:f3cfdbe43d7c720cd7ff1b55cbae250f7cb2daf18b3bfdd33ccde676687ea1cc20230201—
wolfi20230201—
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30MIT
wolfi-baselayout20230201-r30—
wolfi-baselayout.yamla4472f6292a5e48d6d611bf24c6e119b1a483e66Apache-2.0

Clean   No known vulnerabilities in the latest scan.

Everything is verifiable without an account. Copy and run:

Build provenance (SLSA v1.0, Build L2)

gh attestation verify oci://ghcr.io/rtvkiz/minimal-regctl:latest --owner rtvkiz

Cosign signature

cosign verify \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-regctl:latest

SBOM attestation (SPDX)

cosign verify-attestation --type spdxjson \
  --certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
  --certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
  ghcr.io/rtvkiz/minimal-regctl:latest \
  | jq -r '.payload | @base64d | fromjson | .predicate'

Signatures are logged in the public Rekor transparency log.

More Kubernetes, CI & IaC images

Weighing this against another provider? The comparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read the migration guide for what actually breaks when you switch.