Tools
copacetic
project-copacetic/copacetic
A CLI tool that directly patches vulnerabilities in existing container images with buildkit, driven by reports from scanners such as Trivy, without full rebuilds.
Topics
Related projects
grype13.3kGrype is a vulnerability scanner for container images, filesystems and SBOMs. It covers major OS and language package ecosystems, supports Docker, OCI and Singularity formats, and prioritizes risk with EPSS, KEV and OpenVEX filtering.
trivy39.3kA comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOM issues across container images, filesystems, repositories, Kubernetes, and clouds.
ContainerSSH3.1kContainerSSH is an SSH server that launches a fresh container for each login, with pluggable authentication and configuration webhooks, Docker/Kubernetes backends and audit logging for labs, debugging access and honeypots.
slim23.5kA container optimization toolkit that inspects application behavior to minify images by up to 30x and generate tighter security profiles.
dockle3.3kDockle is a container image linter that audits Docker images against CIS benchmarks and best practices, reporting FATAL, WARN, and INFO findings with remediation guidance for secure image builds.
bearer2.8kBearer is a static application security testing (SAST) CLI that scans source code and data flows to find and prioritize security and privacy risks. Developers run it locally or in CI pipelines.