Skip to content

Conversation

Daniel-Wachter
Copy link
Contributor

@Daniel-Wachter Daniel-Wachter commented Apr 29, 2025

Description

Add support for MinimOS

Hi,
I’m part of the Minimus team. Minimus delivers secure, minimal container images with auto-generated SBOMs and real-time vulnerability threat intelligence to help reduce vulnerability risk.
We also maintain a minimal operating system called MinimOS. We’ve been publishing our security advisories in a secdb feed and would like to contribute it as a new security data source.

Details:
The feed URL: https://packages.mini.dev/advisories/secdb/security.json

The format closely mirrors Alpine's secdb, but it's unversioned—similar to Alpine's edge feed.

Discussion ref: #8666

Thanks for your consideration!

Related issues

Related PRs

Checklist

  • I've read the guidelines for contributing to this repository.
  • I've followed the conventions in the PR title.
  • I've added tests that prove my fix is effective or that my feature works.
  • I've updated the documentation with the relevant information (if needed).
  • I've added usage information (if the PR introduces new options)
  • I've included a "before" and "after" example to the description (if the PR is a user interface change).

@Daniel-Wachter
Copy link
Contributor Author

As this is dependent on aquasecurity/trivy-db#281, trivy-db version will be bumped once the PR is merged

@itaysk itaysk mentioned this pull request May 25, 2025
@itaysk itaysk linked an issue May 25, 2025 that may be closed by this pull request
- remove unneeded link in docs
- fix linter error
- remove impossible AffectedVersion field in testdata
@DmitriyLewen DmitriyLewen enabled auto-merge May 29, 2025 11:03
@DmitriyLewen DmitriyLewen added this pull request to the merge queue May 29, 2025
Merged via the queue into aquasecurity:main with commit c2dde33 May 29, 2025
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support for MinimOS
4 participants