copacetic
copacetic copied to clipboard
🧵 CLI tool for directly patching container images using reports from vulnerability scanners
### What kind of request is this? New feature ### What is your request or suggestion? Direct feedback after demoing copa: > One other feature I would like to see...
### What kind of documentation improvement is needed? Other ### What is the change that is needed? I'm creating this issue to document something I'd like to do. I think...
### What kind of request is this? Other ### What is your request or suggestion? Missing coverage in most of the packages ``` ? github.com/project-copacetic/copacetic/pkg/buildkit [no test files] ? github.com/project-copacetic/copacetic/pkg/patch...
### What kind of request is this? New feature ### What is your request or suggestion? Today, copa supports trivy json as the input. We should also support [`sarif`](https://docs.oasis-open.org/sarif/sarif/v2.0/sarif-v2.0.html) as...
### Version of copa v0.2.0 ### Expected Behavior I've expected that the patch applies the `latest `or at least the highest `fixedVersion `number of a package in case there are...
### Version of copa v0.2.0-17-g4d03dd1 ### Expected Behavior fix the os vuln in image successfully ### Actual Behavior failed to patch image because copa can't request registry ### Steps To...
Describe the changes in this pull request using active verbs such as _Add_, _Remove_, _Replace_ ... Adds step to build and push new copa-extension image on each copa release. Related...
Related to #40
Closes #723