RapidFort has introduced Kimia, a new open source, daemon-less container build system designed as a secure, actively maintained successor to Kaniko. Kimia offers full backward compatibility for existing Kaniko workflows while adding enterprise-grade security, complete Dockerfile support, and significant attack-surface reduction. The platform runs entirely as a non-root process, aligns with Kubernetes Pod Security “Restricted” policies, and supports real-time SBOM generation for improved compliance and visibility.
Developed in collaboration with SOSi, Kimia embeds reproducible builds, image signing, and build provenance directly into the container pipeline, enabling verifiable and supply-chain-secure builds. Kimia is available immediately, with existing Kaniko users able to migrate using current configurations, providing teams with a seamless path to stronger security without disrupting existing processes.