Ecosyste.ms: Repos
An open API service providing repository metadata for many open source software ecosystems.
GitHub / project-copacetic / copacetic
🧵 CLI tool for directly patching container images using reports from vulnerability scanners
JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/project-copacetic%2Fcopacetic
Stars: 815
Forks: 55
Open Issues: 62
License: apache-2.0
Language: Go
Repo Size: 10.8 MB
Dependencies:
1,835
Created: over 1 year ago
Updated: about 20 hours ago
Last pushed: about 22 hours ago
Last synced: about 6 hours ago
Commit Stats
Commits: 57
Authors: 6
Mean commits per author: 9.5
Development Distribution Score: 0.439
More commit stats: https://commits.ecosyste.ms/hosts/GitHub/repositories/project-copacetic/copacetic
Topics: cncf, compliance, container-image, container-security, containers, devsecops, docker, hacktoberfest, patching, security, trivy, vulnerability
Files
Loading...
Readme
Loading...
Dependencies
website/versions.json
meteor
- actions/checkout v3 composite
- actions/setup-go v3 composite
- golangci/golangci-lint-action v3 composite
.github/workflows/release.yml
actions
- AButler/upload-release-assets c94805dc72e4b20745f543da0f62eaee7722df7a composite
- actions/checkout v3 composite
- actions/setup-go v3 composite
- go-semantic-release/action bc71199f07484e231fa3b845a39a01146e3a5f3e composite
- peterjgrainger/action-create-branch 08259812c8ebdbf1973747f9297e332fa078d3c1 composite
go.mod
go
- github.com/Masterminds/semver/v3 v3.2.0
- github.com/Microsoft/go-winio v0.6.0
- github.com/antchfx/xmlquery v1.3.13
- github.com/antchfx/xpath v1.2.1
- github.com/aquasecurity/trivy v0.36.1
- github.com/aquasecurity/trivy-db v0.0.0-20221227141502-af78ecb7db4c
- github.com/caarlos0/env/v6 v6.10.1
- github.com/containerd/console v1.0.3
- github.com/containerd/containerd v1.6.15
- github.com/containerd/continuity v0.3.0
- github.com/containerd/ttrpc v1.1.1-0.20220420014843-944ef4a40df3
- github.com/containerd/typeurl v1.0.2
- github.com/distribution/distribution v2.8.1+incompatible
- github.com/docker/cli v20.10.22+incompatible
- github.com/docker/distribution v2.8.1+incompatible
- github.com/docker/docker v20.10.20+incompatible
- github.com/docker/docker-credential-helpers v0.7.0
- github.com/fsnotify/fsnotify v1.6.0
- github.com/go-logr/logr v1.2.3
- github.com/go-logr/stdr v1.2.2
- github.com/gofrs/flock v0.7.3
- github.com/gogo/googleapis v1.4.1
- github.com/gogo/protobuf v1.3.2
- github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
- github.com/golang/protobuf v1.5.2
- github.com/google/go-containerregistry v0.12.0
- github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
- github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
- github.com/grpc-ecosystem/grpc-gateway v1.16.0
- github.com/hashicorp/errwrap v1.1.0
- github.com/hashicorp/go-multierror v1.1.1
- github.com/hashicorp/hcl v1.0.0
- github.com/inconshreveable/mousetrap v1.0.1
- github.com/klauspost/compress v1.15.11
- github.com/knqyf263/go-apk-version v0.0.0-20200609155635-041fdbb8563f
- github.com/knqyf263/go-deb-version v0.0.0-20190517075300-09fca494f03d
- github.com/knqyf263/go-rpm-version v0.0.0-20220614171824-631e686d1075
- github.com/magiconair/properties v1.8.6
- github.com/mitchellh/mapstructure v1.5.0
- github.com/moby/buildkit v0.10.6
- github.com/moby/locker v1.0.1
- github.com/moby/sys/signal v0.7.0
- github.com/morikuni/aec v1.0.0
- github.com/opencontainers/go-digest v1.0.0
- github.com/opencontainers/image-spec v1.1.0-rc2
- github.com/pelletier/go-toml v1.9.5
- github.com/pelletier/go-toml/v2 v2.0.5
- github.com/pkg/errors v0.9.1
- github.com/samber/lo v1.36.0
- github.com/sirupsen/logrus v1.9.0
- github.com/spdx/tools-golang v0.3.0
- github.com/spf13/afero v1.9.2
- github.com/spf13/cast v1.5.0
- github.com/spf13/cobra v1.6.1
- github.com/spf13/jwalterweatherman v1.1.0
- github.com/spf13/pflag v1.0.5
- github.com/spf13/viper v1.14.0
- github.com/subosito/gotenv v1.4.1
- github.com/tonistiigi/fsutil v0.0.0-20220315205639-9ed612626da3
- github.com/tonistiigi/units v0.0.0-20180711220420-6950e57a87ea
- github.com/tonistiigi/vt100 v0.0.0-20210615222946-8066bb97264f
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.29.0
- go.opentelemetry.io/otel v1.4.1
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.4.1
- go.opentelemetry.io/otel/sdk v1.4.1
- go.opentelemetry.io/otel/trace v1.4.1
- go.opentelemetry.io/proto/otlp v0.12.0
- golang.org/x/crypto v0.3.0
- golang.org/x/exp v0.0.0-20220823124025-807a23277127
- golang.org/x/mod v0.6.0
- golang.org/x/net v0.2.0
- golang.org/x/sync v0.1.0
- golang.org/x/sys v0.3.0
- golang.org/x/text v0.5.0
- golang.org/x/time v0.0.0-20220609170525-579cf78fd858
- golang.org/x/tools v0.2.0
- golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2
- google.golang.org/genproto v0.0.0-20221024183307-1bc688fe9f3e
- google.golang.org/grpc v1.50.1
- google.golang.org/protobuf v1.28.1
- gopkg.in/ini.v1 v1.67.0
- gopkg.in/yaml.v2 v2.4.0
- gopkg.in/yaml.v3 v3.0.1
.github/workflows/scorecards.yml
actions
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
- actions/upload-artifact a8a3f3ad30e3422c9c7b888a15615d19a852ae32 composite
- github/codeql-action/upload-sarif 6a28655e3dcb49cb0840ea372fd6d17733edd8a4 composite
- ossf/scorecard-action 08b4669551908b1024bb425080c797723083c031 composite
- step-security/harden-runner 8ca2b8b2ece13480cda6dacd3511b49857a23c09 composite
.github/workflows/build.yml
actions
- actions/checkout v3 composite
- actions/download-artifact v3 composite
- actions/upload-artifact v3 composite
- devcontainers/ci v0.2 composite
- docker/login-action v2 composite
.github/workflows/codeql.yml
actions
- actions/checkout v3 composite
- github/codeql-action/analyze v2 composite
- github/codeql-action/autobuild v2 composite
- github/codeql-action/init v2 composite
- actions/cache v3.2.5 composite
- actions/checkout v3 composite
- actions/setup-node v3 composite
- peaceiris/actions-gh-pages v3 composite
- step-security/harden-runner 18bf8ad2ca49c14cbb28b91346d626ccfb00c518 composite
- @docusaurus/module-type-aliases 2.2.0 development
- @tsconfig/docusaurus ^1.0.5 development
- typescript ^4.7.4 development
- @docusaurus/core 2.2.0
- @docusaurus/preset-classic 2.2.0
- @mdx-js/react ^1.6.22
- clsx ^1.2.1
- prism-react-renderer ^1.3.5
- react ^17.0.2
- react-dom ^17.0.2
.github/workflows/check-deps.yml
actions
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
- actions/setup-go 93397bea11091df50f3d7e59dc26a7711a8bcfbe composite
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
- actions/dependency-review-action 6c5ccdad469c9f8a2996bfecaec55a631a347034 composite
- step-security/harden-runner 8ca2b8b2ece13480cda6dacd3511b49857a23c09 composite
- actions/checkout 8ade135a41bc03ea155e62e844d188df1ea18608 composite
- peter-evans/create-pull-request 153407881ec5c347639a548ade7d8ad1d6740e38 composite
- step-security/harden-runner 8ca2b8b2ece13480cda6dacd3511b49857a23c09 composite