Bitnami Secure Images Skip to main content Menu Bitnami Developer Center Register Login Home Applications Support Resources Documentation Blog Trademark Try Now Log in Log In Register Please be advised that our Bitnami Portal will be undergoing maintenance on Saturday, May 23, from 9:30 PM PDT to 11:30 PM PDT, during which time our system will not be available. We apologize for any inconvenience and appreciate your patience. How to prepare for the Bitnami changes coming soon Bitnami Premium in partnership with Arrow Commercial upgrade to the Bitnami Application Catalog and Helm charts. It will provide enterprise support for all 500+ Bitnami Premium packages, and will include unlimited pulls of all Bitnami Premium containers and Helm charts from Docker Hub, and maintain up-to-date long term support branches of all Bitnami application packages. Upgrade at ArrowSphere Marketplace Security through Transparency Give your development teams access to thousands of production-ready, hardened images. Accurately assess your security posture through industry standard security artifacts. Get 24/7 support and image customization features for catalog applications. Why do highly regulated industries trust Bitnami for production? 350+ Container Images and 140+ Helm Charts Production-ready OSS applications plus the internet's favorite Helm charts Security with Transparency Includes VEX docs, CVE scan results, KEVs, SBOM for all images Built for compliance Reduce NIST Accreditation time up to 80%. Supports FIPS, STIG and FedRAMP Trusted and Proven Over 500 million docker pulls and one million active deployments per month Air-Gap Ready Out-of-the-box support for air-gapped environments Contact sales for everything Bitnami Secure Images has to offer. Buy Now Start using the free development version of Bitnami Secure Images today. Try Now Bitnami Secure Images at-a-glance Access thousands of hardened, minimal CVE images of 350+ open source applications for Kubernetes and VMs More than 140 of the internet’s most popular Helm charts, plus distroless charts for best in class security, 83% smaller with 50% fewer packages Stay more secure and compliant with continuously built images updated within hours of upstream patches Triage security vulnerabilities faster, with transparency into CVE risks using industry standard Vulnerability Exploitability Exchange (VEX) Comprehensive software bill of materials, SLSA 3 supply chain attestation signatures, anti-virus scans, reports through API for integration with existing enterprise security tools Support for building customized images Minimal attack surface OS Base (Photon) that is easy to extend using industry standard package format Application Bitnami Secure Images Size AMD (MBs) Package Count Average CVE Count KEV Reports VEX Statements CVE Scan Results Software Bill of Materials FIPS, STIG, FedRAMP .NET 68.22 36 0 Java 101.57 48 0 MariaDB 18.84 29 0 Node.js 48.99 30 0 Python 20.03 46 0 Ruby 28.71 321 0 Table showing examples of popular Bitnami applications and associated size, package counts, average CVE counts, and included features and support for security and compliance standards. Frequently Asked Questions Are Bitnami Secure Images free? Developers can access a portion of Bitnami Secure Images for non-production use cases. Free images are only available in the latest tag. See our Dockerhub for a list of what’s free. For access to all the images/applications in the catalog, along with many other benefits, you can purchase Bitnami Secure Images. Bitnami Secure Images allows you to use open source software application components in mission-critical projects and production environments in a secure, sustainable and compliant manner. Where can I deploy the applications I get from Bitnami Secure Images? Applications from Bitnami Secure Images are platform-agnostic and can be deployed on any OCI-compliant Kubernetes environments, on any OCI-compliant container runtime and as VMs on VMware infrastructure. We test the applications in our catalog across all major Kubernetes platforms including Tanzu Kubernetes Grid Integrated, Google Kubernetes Engine, Amazon Elastic Container Service, Azure Kubernetes Service and Red Hat OpenShift, so that you can confidently deploy them on any platform of your choice. View our verification matrix How frequently are the applications in Bitnami Secure Images verified and updated? All container images, Helm charts and virtual machines available in the catalog are continuously verified to ensure they include the latest dependencies and minimal CVEs. New versions are only released after they meet specific conditions. This ensures that only relevant updates are delivered to customer registries. Container images A new container is triggered as long it fulfills any of the following cases: A fix for a critical CVE is detected in the OS package An upstream update in the main component of the container is detected There are changes in the configuration scripts such as feature improvements or bug fixes Every 30 days if a new version of the container was not released within that period Helm charts A new Helm chart is triggered as long as it fulfills any of the following cases: A new Helm chart is released in Bitnami Secure Images A new feature or fix for an existing application is merged to the catalog A new version of the main container is triggered that fixes a critical CVE Indirectly when there is an upstream update in the main container Every 30 days if a new version of the chart was not released within that period Virtual machines A new VM is triggered as long it fulfills any of the following cases: An upstream update in the main component of the VM is detected A critical security fix is available Every 30 days if a new version of the application was not released within that period How does the Bitnami Team ensure that Bitnami Secure Images include the latest security fixes? Bitnami Secure Images implements the following policies: Bitnami Secure Images triggers a release of a new Helm chart when a new version of the main server or application is detected. For example, if the system automatically detects a new version of MariaDB, the Bitnami Secure Images pipeline automatically releases a new container with that version and also releases the corresponding Helm chart if it passes all tests. That way, Bitnami Secure Images ensures that the application version released is always the latest stable one and has the latest security fixes. Bitnami Secure Images triggers a release of a new chart when a package that includes a fix for a CVE from the distribution in any of the containers that it includes is detected. The system scans all our containers and releases new images daily with the latest available system packages. Once the pipeline detects there is a new package that fixes a CVE, our team triggers the release of a new Helm chart to point to the latest container images. The Bitnami Secure Images team monitors different CVE feeds—such as Heartbleed or Shellshock—to fix the most critical issues as soon as possible. Once a critical issue is detected in any of the catalog charts included in Bitnami Secure Images, a new solution is released. Bitnami Secure Images provides updates in less than 48 business hours. How do I purchase full access to the Bitnami Secure Images catalog, including Helm charts? Contact us to purchase Bitnami Secure Images today! Since 2007, Bitnami has revolutionized open-source software deployment, providing prepackaged application stacks that simplify application development and delivery. Bitnami is trusted by millions of developers. With more than 500 million monthly docker pulls, Bitnami has positioned itself as a mature and reliable partner. Its extensive catalog, robust security practices and continuous innovation set it apart in the software supply chain security industry. Bitnami's enduring commitment to excellence ensures developers can build with confidence, supported by a proven industry pioneer. Hidden Popup Blocker Notice × To prevent this message from showing again, please enable pop-up blockers for support.broadcom.com or click Continue to proceed. Continue Top Products Solutions Support and Services Company How To Buy Copyright © 2005-2024 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. Accessibility Privacy Site Map Supplier Responsibility Terms of Use