cleanstart/python repository overview

Verified PYTHON Container Image

A hardened, minimal PYTHON container image built from source with verifiable software provenance and an SBOM, designed for secure production deployments.

For additional versions including FIPS support, explore CleanStart Images — secure, hardened container images⁠

Pull Commands Download the runtime container images

docker pull cleanstart/python:latest
docker pull cleanstart/python:latest-dev

Interactive Development Start interactive session for development

docker run -it --name python-dev \
  -v $(pwd):/workspace \
  -w /workspace \
  cleanstart/python:latest-dev /bin/sh

Run Hello World Execute a simple Hello World program

docker run --rm cleanstart/python:latest-dev -c 'print("Hello, World!")'

Mount Workspace Run container with local workspace mounted

 docker run --rm -v $(pwd):/app -w /app --user $(id -u):$(id -g) cleanstart/python:latest-dev -c 'import os; print(os.listdir("."))'

Application Server Run application with port forwarding

docker run -d --name python-app \
  -p 8000:8000 \
  -v $(pwd):/app \
  -w /app \
  cleanstart/python:latest

Why Use CleanStart Images⁠

• Verified — Built from source with verifiable software provenance
• Hardened — Minimal software footprint designed for secure deployment
• Transparent — SBOM available for visibility into image contents
• Production-ready — Built for modern container environments