project-copacetic / copacetic

🧵 CLI tool for directly patching container images using reports from vulnerability scanners

https://project-copacetic.github.io/copacetic/

project-copacetic/copacetic Issues

[REQ] Add support for other output modes as buildctl does
Updated 13 days ago
[REQ] Add a grace period for long running deferred cleanup functions to complete
Updated 13 days ago
[REQ] Support RPM-based images with valid rpm status but missing tools
Updated 13 days ago
[QUESTION] Verify if there are format correctness check that need to be added given lack of support in rpmVer lib
Updated 13 days ago
[REQ] Add support for custom APT config and gpg key injection
Updated 13 days ago
[REQ] Support Debian images with valid dpkg status but missing tools
Updated 13 days ago
[REQ] Add support for qualifying image name with designated repository
Updated 13 days ago
[REQ] Add support for custom APK config
Updated 13 days ago
[REQ] Support "distroless" Alpine Images
Updated 13 days ago
[REQ] Test buildkit with defaults
Updated 13 days ago
[REQ] upgrade all packages without scanner input
Updated 13 days ago1
Copa should also check if there are any package updates. If not, it should fast fail
Updated 13 days ago
Copa might need to skip validation or find a different source for validation, as copa won't have the scanner input to validate against.
Updated 13 days ago
Copa will need to write metadata information about which packages got patched.
Updated 13 days ago
[REQ] Add Rocky Linux as supported OsType
Updated 15 days ago
[DOC] update source policy docs for debian 12
Closed 16 days ago1
[REQ] classify CI runs as informing or blocking
Closed 19 days ago
For distroless, copa might need to get list of packages first, since we don't have the package manager tooling.
Updated 21 days ago
[QUESTION] How to resolve "downloaded package perl-Archive-Tar version 2.38-488.cm2 lower than required 5.34.1-489.cm2 for update"
Closed a month ago2
[REQ] windows container support
Updated a month ago1
[QUESTION] Does this support prisma cloud
Closed a month ago10
Copa will need to know what is the OS for an image, since we rely on the scanners for this today. This is a prereq so copa can route to correct package manager. This part can be spin up to be a library in the future.
Closed a month ago
It would be useful to have copa to patch all packages without needing input from scanners as an opt in feature/flag. This would be equivalent of `apt update && apt upgrade` (and similar for other tooling like yum, and apk)
Closed a month ago
[REQ] Add support for labels
Updated 2 months ago2
[REQ] Update buildx integration to use new `docker buildx dial-stdio`
Updated 2 months ago
[REQ] copa should fast fail if input has no fixable vulns
Closed 2 months ago
[BUG] Copa patch error cbl-mariner/base/core image
Closed 2 months ago
[BUG] Copa patch error grafana/grafana-image-renderer
Closed 2 months ago1
Copa Failed on Unmet dependencies
Closed 2 months ago2
[BUG] Redhat ubi-micro images aren't supported
Updated 2 months ago
[DOC] Create an adopters file
Closed 3 months ago
[BUG] copa CLI gets to a deadlock if package validation fails
Closed 3 months ago2
[DOC] troubleshooting guide to debug package validation failures
Updated 3 months ago
[BUG] Copa hangs when patching nginx:1.21.6
Closed 3 months ago1
[DOC] best practices for patched tags
Closed 3 months ago1
[REQ] log for held packages
Updated 3 months ago
[BUG] Invalid patched image tag causes copa to freeze
Closed 3 months ago
[REQ] Using Azure Container Registry inplace of of docker.io registry.
Closed 4 months ago10
[BUG] Unable to initialize frontend (Dialog/Readline
Closed 4 months ago2
[REQ] create a docker desktop extension
Updated 4 months ago
[REQ] add guardrails for parsing OS version
Updated 4 months ago
[QUESTION] add SBOM Attestation to patched images
Updated 4 months ago2
[QUESTION] <title>Using Azure Container Registry in place of docker.io
Closed 4 months ago1
[REQ] Patch from Trivy SBOM scan results
Updated 4 months ago4
Is Copa only fixing OS type vulnerabilities?
Closed 4 months ago2
how to install Copa for Ubuntu 22.04 machine?
Closed 4 months ago4
[REQ] Enhance Image Resolution Methods
Closed 4 months ago2
[REQ] Support for encrypted images
Updated 5 months ago
[DOC] clarify OS Version in scanner
Updated 5 months ago
[QUESTION] Getting error when running copa patch
Closed 5 months ago2