SecureBuild – Zero-CVE Images That Pay OSS Projects

In plain words

SecureBuild offers container images built with zero known vulnerabilities for open source projects, based on Wolfi. The service provides full software bill of materials and supports enterprise security requirements. It is designed for open source maintainers and projects seeking sustainable funding, allowing them to partner with and endorse the images in exchange for revenue sharing, with 70% of subscription fees returned to participating projects.

written from the facts on this page · September 2026

From the sources

Build secure, zero-CVE container images from source. Open source container security for the modern software supply chain.

Build zero-CVE container images from source with full attestations and SBOMs. SecureBuild automates vulnerability monitoring and rebuilds your images when upstream patches are available. Most container images ship with known vulnerabilities. The average Docker Hub image contains 70+ CVEs. Current solutions are manual, slow, and create constant overhead for engineering teams. New vulnerabilities are discovered daily. Manual patching is time-consuming and error-prone, leaving your infrastructure exposed. Traditional patching workflows can take weeks. Critical vulnerabilities need immediate attention, not bureaucratic delays. Constantly rebuilding images for every CVE is exhausting. Your team…from securebuild.com

In the maker’s words, at launch

We're launching SecureBuild: https://securebuild.com — a new way for open source projects and maintainers to earn revenue by partnering with and endorsing our Zero-CVE container images of their project. We’ve spent the last decade at Replicated (https://news.ycombinator.com/item?id=9841243)…

• 
  Minimal – Open-Source Community driven Hardened Container ImagesJan 2026 · github.com · ▲120

  I would like to share Minimal - Its a open source collection of hardened container images build using Apko, Melange and Wolfi packages. The images are build daily, checked for updates and resolved as soon as fix is available in upstream source and Wolfi package. It utilizes the power of available open source solutions and contains commercially available images for free. Minimal demonstrates that it is possible to build and maintain hardened container images by ourselves. Minimal will add more images support, and goal is to be community driven to add images as required and fully customizable.

• 
  Opengrep2025 · opengrep.dev · ▲340

  The open source code security engine

• 
  Small, secure Nginx Docker image2019 · github.com · ▲38

  🦅 Built-from-source container image of NGINX. Contribute to ricardbejarano/nginx development by creating an account on GitHub.

• 
  Awesome OSS Developer Security Tools2022 · ▲100

  A curated list of free OSS developer-first security tools

• 
  Open-source certificate from GitHub activityJan 2026 · certificate.brendonmatos.com · ▲43

  I built this as a small side project to learn and experiment, and I ended up with this! I used a subdomain from my personal portfolio, and everything else runs on free tiers. The project uses Nuxt, SVG, Cloudflare Workers, D1 (SQL), KV, Terraform, and some agentic coding with OpenAI Codex and Claude Code. What started as a joke among friends turned into a fun excuse to build something end to end, from zero to production, and to explore a few things I’d never touched before. I’d really appreciate any feedback or suggestions.

• 
  AttackerViewFeb 2026 · attackerview.com · ▲13

  Last week I wrote about building a scanner that writes its own exploits. A cron job runs Claude Code every night, it reads new CVEs, writes proof-of-concept checks, tests them against vulnerable and patched Docker instances, and opens PRs. I review and merge in the morning. That post was about how t

• 
  /dev/null▲484

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 28d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 26d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲346

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 21d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• IM
  I'm an airline pilot – I built interactive graphs/globes of my flights▲1,539

  Hey HN! Pilots everywhere are required to keep a logbook of all their flying hours, aircraft, airports, and so on. Since I track everything digitally (some people still just use paper logbooks!), I put together some data visualizations and a few 3D globes to show my flying history. This globe is probably my favourite so far: https://jameshard.ing/pilot/globes/all If you’ve got ideas for other graphs or ways to show this kind of data, I’d love to hear them!

  Life & fun · 2025 · jameshard.ing

• 
  Chronicle: Cursor for Slides▲1,212

  Stunning presentations with AI. No design skills required.

  AI · 2025 · chroniclehq.com

• 
  Bubble for native mobile apps (beta)▲1,026

  Build native mobile apps for iOS and Android without code.

  Dev tools · 2025 · bble.io

• 
  Twenty▲989

  Build your Enterprise CRM with an AI-friendly SDK

  Dev tools · 2025 · twenty.com

• 
  Pally - AI Relationship Management▲949

  All your connections, across all your socials.

  AI · 2025 · pally.com

• 
  Workout.cool – Open-source fitness coaching platform▲827

  I was the main contributor to workout.lol, an open-source fitness app to easily build a workout routine. The project had traction (1.4k GitHub stars, 95 forks, ~20K visits/month), but was eventually sold due to video licensing hurdles. The new owner stopped maintaining it, and the repo went abandoned. Over the next 9 months, I sent 15 emails to try to save it : no replies. Feature requests & issues were ignored. The community was left with a "broken" tool let's say. I couldn't just let it die So I built the new version from scratch with the same open-source spirit, but a better…

  Dev tools · 2025 · github.com