copa ☆
« Back to VersTracker
Description:
Tool to directly patch container images given the vulnerability scanning results
Type: Formula  |  Latest Version: 0.12.0@0  |  Tracked Since: Dec 17, 2025
Links: Homepage  |  formulae.brew.sh
Category: Security
Tags: security containers patching vulnerability devops
Install: brew install copa
About:
Copacetic (copa) is a CLI tool that patches container images directly using vulnerability scan reports. It analyzes scan results, identifies missing patches, and rebuilds the image with the necessary updates. This eliminates the need to rebuild images from source, streamlining container security maintenance.
Key Features:
  • Direct image patching without source code
  • Supports multiple vulnerability scanners (Trivy, etc.)
  • Rebuilds images with updated packages
  • CLI-based and automation-friendly
Use Cases:
  • Patching container images in CI/CD pipelines
  • Maintaining security compliance for deployed containers
  • Reducing time-to-patch for critical vulnerabilities
Alternatives:
  • Docker Scout – Docker Scout provides integrated vulnerability management within Docker Desktop, while copa is a standalone CLI tool focused on patching.
  • Rebuilding from source – Traditional rebuilds require full source access and build pipelines; copa patches existing images directly.
Version History
Detected Version Rev Change Commit
Nov 3, 2025 7:37am 0 VERSION_BUMP e603770d
Oct 10, 2025 12:02pm 0 VERSION_BUMP fb4c0d85
Sep 14, 2025 1:37am 0 VERSION_BUMP 9d109dec
Nov 10, 2024 4:33pm 0 VERSION_BUMP 8bd7dd1e
Oct 29, 2024 9:29pm 0 VERSION_BUMP 012ec0d2
« Back to VersTracker  |  Browse Packages  |  About