oras

FIPS 140-3Developer tools

ORAS (OCI Registry As Storage) is a command-line tool for managing OCI artifacts in registries. It enables developers to push, pull, copy, and discover various content types beyond container images.

Variant

Image version	Type	Compliance	Pkg mgr	Shell	User	Size	Pushed	Vulns	Health
Distroless1.3.3-distroless-a41d6887cd09	FIPS	FIPSSigned	—	—	nonroot (65532)	28.2 MB	Aug 24, 2026	High	C76
Distroless1.3.3-distroless-45e181dfee5d	FIPS	FIPSSigned	—	—	nonroot (65532)	28.2 MB	Aug 24, 2026	None	A100
Alpine1.3.3-alpine3.23-b677ad644793	Base	CISSigned	—	—	nonroot (65532)	4.6 MB	Aug 24, 2026	None	A100
Alpine1.3.3-alpine3.24-96adc14fb7a2	Base	CISSigned	—	—	nonroot (65532)	4.6 MB	Aug 24, 2026	None	A100
Debian1.3.3-8352b37b7a63	Base	CISSigned	—	—	nonroot (65532)	4.8 MB	Aug 24, 2026	None	A100
Distroless1.3.3-distroless-7c567328590a	FIPS	FIPSSigned	—	—	nonroot (65532)	28.2 MB	Aug 13, 2026	None	A100
Debian1.3.3-e37c41e65aed	Base	CISSigned	—	—	nonroot (65532)	4.8 MB	Aug 10, 2026	None	A100
Alpine1.3.3-36a8681932e0	Base	CISSigned	—	—	nonroot (65532)	4.6 MB	Aug 10, 2026	None	A100
Alpine1.3.3-alpine3.23-67a5e938c0ec	Base	CISSigned	—	—	nonroot (65532)	4.6 MB	Aug 10, 2026	None	A100