project-copacetic / copacetic

🧵 CLI tool for directly patching container images using reports from vulnerability scanners

https://project-copacetic.github.io/copacetic/

project-copacetic/copacetic Issues

[REQ] Implement Copa TODO Comment Features to extend functionality
Updated 11 days ago4
[REQ] Add support for qualifying image name with designated repository
Updated 11 days ago4
[REQ] Add support for custom APT config and gpg key injection
Updated 12 days ago2
[REQ] Support "distroless" Alpine Images
Updated 12 days ago2
[DOC] Add documentation for patching with digest
Closed 12 days ago1
[BUG] Redhat ubi-micro images aren't supported
Updated 13 days ago1
[REQ] Add support for other output modes as buildctl does
Updated 14 days ago3
[REQ] Support RPM-based images with valid rpm status but missing tools
Updated 14 days ago
[REQ] Add support for custom APK config
Updated 14 days ago
[REQ] Test buildkit with defaults
Updated 14 days ago
[REQ] Add a grace period for long running deferred cleanup functions to complete
Closed 14 days ago
For distroless, copa might need to get list of packages first, since we don't have the package manager tooling.
Closed 17 days ago
[REQ] Add Rocky Linux as supported OsType
Closed 17 days ago
[BUG] flaky custom-unix test
Closed 17 days ago
[DOC] update slack to cncf
Closed 18 days ago
Report the use of components with vulnerabilities in copacetic
Closed 20 days ago1
[QUESTION] Verify if there are format correctness check that need to be added given lack of support in rpmVer lib
Updated 25 days ago
[REQ] Support Debian images with valid dpkg status but missing tools
Updated 25 days ago
[REQ] upgrade all packages without scanner input
Updated 25 days ago1
Copa should also check if there are any package updates. If not, it should fast fail
Updated 25 days ago
Copa might need to skip validation or find a different source for validation, as copa won't have the scanner input to validate against.
Updated 25 days ago
Copa will need to write metadata information about which packages got patched.
Updated 25 days ago
[DOC] update source policy docs for debian 12
Closed a month ago1
[REQ] classify CI runs as informing or blocking
Closed a month ago
[QUESTION] How to resolve "downloaded package perl-Archive-Tar version 2.38-488.cm2 lower than required 5.34.1-489.cm2 for update"
Closed a month ago2
[REQ] windows container support
Updated a month ago1
[QUESTION] Does this support prisma cloud
Closed 2 months ago10
Copa will need to know what is the OS for an image, since we rely on the scanners for this today. This is a prereq so copa can route to correct package manager. This part can be spin up to be a library in the future.
Closed 2 months ago
It would be useful to have copa to patch all packages without needing input from scanners as an opt in feature/flag. This would be equivalent of `apt update && apt upgrade` (and similar for other tooling like yum, and apk)
Closed 2 months ago
[REQ] Add support for labels
Updated 2 months ago2
[REQ] Update buildx integration to use new `docker buildx dial-stdio`
Updated 2 months ago
[REQ] copa should fast fail if input has no fixable vulns
Closed 2 months ago
[BUG] Copa patch error cbl-mariner/base/core image
Closed 2 months ago
[BUG] Copa patch error grafana/grafana-image-renderer
Closed 2 months ago1
[DOC] Create an adopters file
Closed 3 months ago
[BUG] copa CLI gets to a deadlock if package validation fails
Closed 3 months ago2
[DOC] troubleshooting guide to debug package validation failures
Updated 3 months ago
[BUG] Copa hangs when patching nginx:1.21.6
Closed 3 months ago1
[DOC] best practices for patched tags
Closed 4 months ago1
[REQ] log for held packages
Updated 4 months ago
[BUG] Invalid patched image tag causes copa to freeze
Closed 4 months ago
[REQ] Using Azure Container Registry inplace of of docker.io registry.
Closed 4 months ago10
[BUG] Unable to initialize frontend (Dialog/Readline
Closed 4 months ago2
[REQ] create a docker desktop extension
Updated 4 months ago
[QUESTION] add SBOM Attestation to patched images
Updated 4 months ago2
[QUESTION] <title>Using Azure Container Registry in place of docker.io
Closed 4 months ago1
[REQ] Patch from Trivy SBOM scan results
Updated 5 months ago4
Is Copa only fixing OS type vulnerabilities?
Closed 5 months ago2
how to install Copa for Ubuntu 22.04 machine?
Closed 5 months ago4
[REQ] Support for encrypted images
Updated 5 months ago