Features

info

The English user guide is currently in beta preview. Most of the documents have been automatically translated from the Japanese version. Should you find any inaccuracies, please reach out to Flatt Security.

Takumi Images features are built around two ideas: keeping images small, and making their contents and build process verifiable.

• Distroless Images explains how production images contain only the program and its runtime dependencies, without a shell or package manager.
• Multi-Arch Support explains the multi-arch OCI index that lets one tag select either amd64 or arm64.
• Attestation explains how to verify signatures, SBOMs, SLSA Provenance, and VEX.
• Version-Specific Tags (planned) previews the planned policy for version-specific tags in a paid plan.
• Reduced Vulnerability Response Work explains how replacing the base image and pulling updates addresses known vulnerabilities in the base image.
• Malware Resistance explains the structural defenses against supply-chain attacks that target software updates, and their limits.
• Vulnerability Response SLA (planned) previews planned response-time targets in a paid plan.