matdevdug/docker-curl-jq-versioned repository overview

A minimal, security-hardened Debian-based Docker image bundling curl and jq, automatically rebuilt every week to pick up the latest upstream patches.

Small — based on debian:stable-slim

Auto-updated — weekly GitLab CI job rebuilds when curl or jq versions change

Non-root by default — runs as UID 1000

Multi-arch — supports linux/amd64 and linux/arm64

Scanned — every image is Trivy-scanned for HIGH/CRITICAL CVEs before publishing

SBOMs included — SPDX and CycloneDX SBOMs attached as Cosign attestations

Signed — Cosign keyless-signed using GitLab OIDC (sigstore)

docker pull matdevdug/docker-curl-jq-versioned:latest

docker run --rm matdevdug/docker-curl-jq-versioned:latest
-c 'curl -s https://api.github.com/repos/jqlang/jq⁠ | jq .stargazers_count'

Example pinned tag: matdevdug/docker-curl-jq-versioned:curl-8.14.1-2-deb13u3_jq-1.7.1-6-deb13u2 The versioned tags follow the pattern curl-_jq- with +, :, and ~ replaced by - (Docker tag constraints).

Repo lives here: https://gitlab.com/matdevdug/docker-curl-jq-versioned⁠