incident.io
Nexus does the diagnosis; the rest is on-call plumbing
Comparison · Infra & APIs
Kaniko vs ZoneMinder
A side-by-side editorial comparison of Kaniko and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
Kaniko vs ZoneMinder: at a glance
What is Kaniko?
Kaniko's release feed stops dead in June 2024 after a patch that undid its own change
Kaniko builds container images inside a container without a Docker daemon, and its release feed reads as a project in late-stage maintenance that then simply stopped. Every entry in this window carries the same boilerplate header of executor, debug and slim image tags, and underneath it the substance is dependency bumps, CVE-driven upgrades, and narrow fixes to ADD and COPY semantics. The last release here, v1.23.1, is a revert of behaviour changed weeks earlier plus documentation clarifying what the flag was supposed to do.
What is ZoneMinder?
1.38.4 is a security release in all but name, closing ACL gaps across the API.
The 1.38 line is in maintenance, and 1.38.4 is almost entirely authorization work: per-monitor access control enforced on event, frame, zone, tag and media endpoints, two auth bypasses fixed in token validation, and SQL injection and overflow hardening. The 1.36 branch still receives backports, with 1.36.38 carrying its own SQL injection fix. The last feature release was 1.38.0 in February, which brought role-based access control, WebRTC and Go2RTC streaming, and the split of monitor function into separate capturing, analysing, and recording settings.
Kaniko vs ZoneMinder: editorial side-by-side
Kaniko
0.0INFRA · APIS
Kaniko's release feed stops dead in June 2024 after a patch that undid its own change
◆ Current state
Kaniko builds container images inside a container without a Docker daemon, and its release feed reads as a project in late-stage maintenance that then simply stopped. Every entry in this window carries the same boilerplate header of executor, debug and slim image tags, and underneath it the substance is dependency bumps, CVE-driven upgrades, and narrow fixes to ADD and COPY semantics. The last release here, v1.23.1, is a revert of behaviour changed weeks earlier plus documentation clarifying what the flag was supposed to do.
◆ Where it's heading
The cadence tells the story: nine releases between December 2023 and June 2024, then nothing at all in the two years since. Even during the active stretch the work was defensive — registry-map compatibility, ECR authentication breakage, tar.gz handling in ADD, vulnerability scanning added to the executor image — rather than any expansion of what Kaniko does. The one recurring theme with forward motion, registry mirror and registry-map support, was about surviving locked-down or mirrored registry environments.
◆ Prediction
Nothing in these entries points at planned work, and a two-year gap after a revert-and-document patch is the signature of a project no longer being released; anyone depending on it should assume the last published executor image is the last one.
ZoneMinder
2.5INFRA · APIS
1.38.4 is a security release in all but name, closing ACL gaps across the API.
◆ Current state
The 1.38 line is in maintenance, and 1.38.4 is almost entirely authorization work: per-monitor access control enforced on event, frame, zone, tag and media endpoints, two auth bypasses fixed in token validation, and SQL injection and overflow hardening. The 1.36 branch still receives backports, with 1.36.38 carrying its own SQL injection fix. The last feature release was 1.38.0 in February, which brought role-based access control, WebRTC and Go2RTC streaming, and the split of monitor function into separate capturing, analysing, and recording settings.
◆ Where it's heading
Every release since 1.38.0 has been consolidation of what that release opened up. RBAC shipped as a headline feature in February, and the four maintenance drops since have been finding the endpoints it did not cover — the familiar pattern when a permission model is retrofitted onto an API that predates it. Cadence is slow and irregular, months apart, with a 1.39 spec bump already visible in the repo but nothing from that series shipped.
◆ Prediction
Expect more per-endpoint ACL fixes on the 1.38 line before anything from 1.39 reaches release.
Alternatives to Kaniko and ZoneMinder
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Kaniko or ZoneMinder.
werf
Four channels, one fix stream — werf's releases are mostly concurrency repairs.
Infisical
PAM and PKI now take up most of the lines in Infisical's release notes.
Biome
Biome's patch train keeps adding rules — and is quietly growing a Markdown linter.
DNSControl
DNSControl is rewriting its record internals in public, one release candidate at a time
Fission
Fission's release feed carries only RC tags, and none of them say what shipped
See all Kaniko alternatives → · See all ZoneMinder alternatives →
Recent activity from Kaniko and ZoneMinder
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 21h agoZoneMinder1.38.4 closes API ACL gaps and two auth bypasses
- 2mo agoZoneMinder1.38.3 supersedes 1.38.2 with RBAC and injection fixes
- 2mo agoZoneMinderchore: bump redhat spec version to 1.39.11
- 5mo agoZoneMinder1.36.38 backports a SQL injection fix to the legacy branch
- 5mo agoZoneMinder1.38.1 unifies four ONVIF control modules into one
- 6mo agoZoneMinder1.38.0 adds RBAC, WebRTC streaming, and a monitor function split ⚡
- 2y agoKanikoKaniko 1.23.1 reverts --no-push cache behaviour
- 2y agoKanikoKaniko 1.23 adds --chmod for ADD and COPY, registry mirrors for the warmer
- 2y agoKanikoKaniko 1.22 adds path regmaps, fixes multi-file COPY into ENV paths
- 2y agoKanikoKaniko 1.21.1 bumps dependencies to clear CVEs
- 2y agoKanikoKaniko 1.21 unpacks tar.gz in ADD, adds skip-TLS for private git
- 2y agoKanikoKaniko 1.20.1 is documentation and dependency bumps
Frequently asked questions
What is the difference between Kaniko and ZoneMinder?
They serve adjacent needs but don't currently overlap on shipped themes. ZoneMinder is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is Kaniko better than ZoneMinder?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. ZoneMinder is currently shipping more aggressively (velocity 2.5 vs 0.0), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
What are the best alternatives to Kaniko?
Top Kaniko alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Kaniko alternatives" section above for the current picks, or visit /alternatives/kaniko for the full list with editorial commentary on each.
What are the best alternatives to ZoneMinder?
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.