Minimus launches supply chain protection and minicli to automate open-source and container security as code

New York, United States, June 8th, 2026, TechnologyWire

Minimus today announced the general availability of Minimus Supply Chain Protection and minicli. The two new capabilities are designed to help enterprise engineering teams secure open-source software dependencies and manage custom container architectures through automated, code-based workflows.

The launch addresses the growing complexity of securing millions of open-source packages across the wider application ecosystem. Because traditional security measures like basic malware scanning and building from scratch frequently fail to scale against deeply nested package dependencies, Minimus Supply Chain Protection introduces a policy enforcement layer. Operating as a pull-through proxy for NPM and PyPI, the solution sits directly between developers and public repositories. It evaluates package metadata—including commit history, ecosystem popularity, and cooling-off periods—to generate automated risk scores and enforce trust policies across environments without disrupting the developer workflow.

Simultaneously, the introduction of minicli enables platform teams to manage the structural configuration of custom images entirely as code. Available via API for macOS and Linux across AMD and ARM architectures, the command-line tool allows teams to inspect image structures, manage private assets, and export image recipes as YAML files. This allows organizations to integrate container image management directly into existing Git-based workflows and CI/CD pipelines.

When integrated with Minimus Images, which mitigate more than 98% of vulnerabilities within container base images, these new tools allow enterprises to enforce unified security guardrails across both the operating system layer and the application dependency layer.

About Minimus

Minimus is a cloud software security pioneer dedicated to eliminating vulnerabilities at the foundation of containerized architecture. Founded in October 2022 by industry veterans Ben Bernstein, Dima Stopel, and John Morello—the team behind Twistlock and authors of the NIST SP 800-190 container security standard—the company shifts organizations away from reactive scanning by preventing up to 98% of standard cloud vulnerabilities from ever existing. Minimus builds minimal, secure container images from scratch directly from upstream sources, reducing the digital attack surface while functioning as seamless, drop-in replacements within existing engineering toolchains. Backed by a $51 million seed round from YL Ventures and Mayfield, Minimus provides high-efficiency risk reduction that eliminates low-value remediation tasks for developers and streamlines operations for platform teams.