Mosquitto 2.0

locked latest
Full version: 2.0 Analyzed: 2026-02-10
Size Reduction -377% 11.7 MB to 55.7 MB (-44.1 MB saved)
Component Reduction 20% 20 to 16 packages (4 removed)
Vulnerability Reduction 0% 0 to 0 vulnerabilities (0 eliminated)

Image Comparison

Propertyupstreamlocked
Imagedocker.io/library/eclipse-mosquitto:2.0.22ghcr.io/armorred/mosquitto:2.0-locked
Size11.7 MB55.7 MB
Layers318
Components2016
Vulnerabilities00
Runtime Userroot999

Vulnerability Analysis

upstream 0 total
locked 0 total

Software Bill of Materials

upstream components (20)
  • alpine-baselayout 3.7.1-r8
  • alpine-baselayout-data 3.7.1-r8
  • alpine-keys 2.6-r0
  • alpine-release 3.23.3-r0
  • apk-tools 3.0.3-r1
  • busybox 1.37.0-r30
  • busybox-binsh 1.37.0-r30
  • ca-certificates 20251003-r0
  • ca-certificates-bundle 20251003-r0
  • cjson 1.7.19-r1
  • libapk 3.0.3-r1
  • libcrypto3 3.5.5-r0
  • libssl3 3.5.5-r0
  • libwebsockets 4.3.5-r2
  • musl 1.2.5-r21
  • musl-utils 1.2.5-r21
  • scanelf 1.3.8-r2
  • ssl_client 1.37.0-r30
  • tzdata 2025c-r0
  • zlib 1.3.1-r2
locked components (16)
  • acl 2.3.2
  • attr 2.5.2
  • c-ares 1.27.0
  • cjson 1.7.18
  • coreutils 9.5
  • gcc 13.3.0
  • gcc 13.3.0
  • glibc 2.40-66
  • gmp-with-cxx 6.3.0
  • libidn2 2.3.7
  • libunistring 1.2
  • libuv 1.48.0
  • libwebsockets 4.3.3
  • mosquitto 2.0.22
  • openssl 3.3.3
  • xgcc 13.3.0

Download SBOMs

Upstream SBOM Locked SBOM

Usage

$ podman pull ghcr.io/armorred/mosquitto:2.0-locked

Verify Signature

$ cosign verify --key https://armorred.org/cosign.pub ghcr.io/armorred/mosquitto:2.0-locked