project-copacetic/copacetic issues and pull requests

#655 - chore: bump github.com/aquasecurity/trivy from 0.51.4 to 0.52.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dependencies, go

#654 - chore: bump github.com/containerd/containerd from 1.7.17 to 1.7.18

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#653 - [REQ] Utilize GitHub Arm runners

Issue - State: open - Opened by ashnamehrotra 4 months ago - 2 comments
Labels: enhancement

#652 - [REQ] Implement a possibility to skip "installToolsCmd"

Issue - State: open - Opened by benjamin-richter 4 months ago - 2 comments
Labels: enhancement

#651 - [REQ] support other tools in installToolsCmd for rpm tooling image

Issue - State: open - Opened by ashnamehrotra 4 months ago - 2 comments
Labels: enhancement

#650 - [REQ] Parsable format for buildkit output within copa

Issue - State: open - Opened by ashnamehrotra 4 months ago - 2 comments
Labels: enhancement

#649 - [REQ] Support inputting tarballs

Issue - State: open - Opened by audunsolemdal 4 months ago - 1 comment
Labels: enhancement

#648 - chore: bump github.com/spf13/viper from 1.18.2 to 1.19.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 3 comments
Labels: dependencies, go

#647 - chore: bump github.com/aquasecurity/trivy from 0.51.4 to 0.52.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#646 - chore: bump the all group in /website with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 4 comments
Labels: dependencies, javascript

#645 - chore: bump the all group with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#644 - feat: update all - check for upgradable packages

Pull Request - State: closed - Opened by ashnamehrotra 4 months ago - 7 comments

#643 - [REQ] Add option to "silent" the output

Issue - State: open - Opened by ashnamehrotra 4 months ago - 9 comments
Labels: enhancement

#642 - [QUESTION] How this app is better than just updating all the packages using OS commands

Issue - State: open - Opened by smartaquarius10 4 months ago - 1 comment
Labels: question

#641 - ci: add CODECOV_TOKEN field to upload coverage

Pull Request - State: closed - Opened by ashnamehrotra 4 months ago - 2 comments

#640 - docs: added helmper to adopters list

Pull Request - State: closed - Opened by ChristofferNissen 4 months ago

#639 - [DOC] Add Helmper to ADOPTERS.md

Issue - State: closed - Opened by ChristofferNissen 4 months ago
Labels: documentation

#638 - chore: bump the all group with 4 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#637 - chore: bump github.com/docker/buildx from 0.13.1 to 0.14.1

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#636 - chore: bump github.com/containerd/containerd from 1.7.16 to 1.7.17

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#635 - ci: updated trivy dependency to v0.51.4

Pull Request - State: closed - Opened by ChristofferNissen 4 months ago - 1 comment

#634 - feat: discard patch layer

Pull Request - State: closed - Opened by MiahaCybersec 4 months ago - 4 comments

#633 - docs: update contributor docs

Pull Request - State: closed - Opened by MiahaCybersec 4 months ago - 4 comments

#632 - feat: add rpm package verification

Pull Request - State: closed - Opened by MiahaCybersec 4 months ago - 1 comment

#631 - [REQ] bulk image patching

Issue - State: open - Opened by sozercan 4 months ago - 1 comment
Labels: enhancement, needs-design

#630 - chore: bump google.golang.org/grpc from 1.63.2 to 1.64.0

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago - 1 comment
Labels: dependencies, go

#629 - chore: bump the all group with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 4 months ago
Labels: dependencies, github_actions

#628 - feat: add custom tooling repo support

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 3 comments

#627 - chore: bump k8s.io/apimachinery from 0.29.3 to 0.30.1

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, go

#626 - docs: patching with digest

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago

#625 - chore: bump github.com/quay/claircore from 1.5.25 to 1.5.28

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 4 comments
Labels: dependencies, go

#624 - [DOC] Add documentation for patching with digest

Issue - State: closed - Opened by ashnamehrotra 5 months ago - 1 comment
Labels: documentation

#623 - chore: bump github.com/containerd/containerd from 1.7.13 to 1.7.16

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, go

#622 - chore: bump the all group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#621 - WIP: adding OCI output mode as buildctl does

Pull Request - State: closed - Opened by h4l0gen 5 months ago - 4 comments

#620 - fix: added context to error

Pull Request - State: closed - Opened by prakrit55 5 months ago - 1 comment

#619 - feat: Add guardrails for parsing OS version

Pull Request - State: closed - Opened by h4l0gen 5 months ago - 3 comments

#618 - feat: Add error validation for update all

Pull Request - State: closed - Opened by ashnamehrotra 5 months ago - 2 comments

#617 - chore: bump github.com/docker/cli from 26.1.0+incompatible to 26.1.2+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, go

#616 - feat: Added logs for held packages

Pull Request - State: closed - Opened by NeerajNagure 5 months ago - 1 comment

#615 - fix: flakey custom unix test

Pull Request - State: closed - Opened by ashnamehrotra 5 months ago - 1 comment

#614 - docs: update slack to cncf

Pull Request - State: closed - Opened by sozercan 5 months ago

#613 - [DOC] update slack to cncf

Issue - State: closed - Opened by sozercan 5 months ago
Labels: documentation

#612 - docs: add buildkit mtls-over-tcp docs

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago

#611 - [REQ] Implement Copa TODO Comment Features to extend functionality

Issue - State: open - Opened by ashnamehrotra 5 months ago - 6 comments
Labels: enhancement, LFX mentorship - do not work on

#610 - Report the use of components with vulnerabilities in copacetic

Issue - State: closed - Opened by HouqiyuA 5 months ago - 1 comment
Labels: enhancement

#609 - [BUG] flaky custom-unix test

Issue - State: closed - Opened by sozercan 5 months ago
Labels: bug

#608 - chore: bump github.com/docker/cli from 26.1.0+incompatible to 26.1.1+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 3 comments
Labels: dependencies, go

#607 - chore: bump the all group in /website with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, javascript

#606 - chore: bump the all group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#605 - feat: add rocky linux support

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 3 comments

#604 - [REQ] Add support for other output modes as buildctl does

Issue - State: open - Opened by ashnamehrotra 5 months ago - 6 comments
Labels: enhancement

#603 - [REQ] Add a grace period for long running deferred cleanup functions to complete

Issue - State: closed - Opened by ashnamehrotra 5 months ago
Labels: enhancement

#602 - [REQ] Support RPM-based images with valid rpm status but missing tools

Issue - State: open - Opened by ashnamehrotra 5 months ago - 9 comments
Labels: enhancement, LFX mentorship - do not work on

#601 - [QUESTION] Verify if there are format correctness check that need to be added given lack of support in rpmVer lib

Issue - State: closed - Opened by ashnamehrotra 5 months ago
Labels: question

#600 - [REQ] Add support for custom APT config and gpg key injection

Issue - State: open - Opened by ashnamehrotra 5 months ago - 6 comments
Labels: enhancement

#599 - [REQ] Support Debian images with valid dpkg status but missing tools

Issue - State: open - Opened by ashnamehrotra 5 months ago
Labels: enhancement

#598 - [REQ] Add support for qualifying image name with designated repository

Issue - State: closed - Opened by ashnamehrotra 5 months ago - 5 comments
Labels: enhancement

#597 - [REQ] Add support for custom APK config

Issue - State: open - Opened by ashnamehrotra 5 months ago
Labels: enhancement

#596 - [REQ] Support "distroless" Alpine Images

Issue - State: closed - Opened by ashnamehrotra 5 months ago - 3 comments
Labels: enhancement, LFX mentorship - do not work on

#595 - [REQ] Test buildkit with defaults

Issue - State: closed - Opened by ashnamehrotra 5 months ago
Labels: enhancement, LFX mentorship - do not work on

#594 - Copa should also check if there are any package updates. If not, it should fast fail

Issue - State: closed - Opened by ashnamehrotra 5 months ago

#593 - Copa might need to skip validation or find a different source for validation, as copa won't have the scanner input to validate against.

Issue - State: closed - Opened by ashnamehrotra 5 months ago

#592 - Copa will need to write metadata information about which packages got patched.

Issue - State: open - Opened by ashnamehrotra 5 months ago - 1 comment

#591 - [REQ] Add Rocky Linux as supported OsType

Issue - State: closed - Opened by RS185734 5 months ago
Labels: enhancement

#590 - chore: bump the all group across 1 directory with 3 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, github_actions

#589 - chore: bump the all group across 1 directory with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, github_actions

#588 - chore: bump the all group in /website with 2 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, javascript

#587 - chore: bump github.com/docker/buildx from 0.13.1 to 0.14.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, go

#586 - chore: bump github.com/moby/buildkit from 0.13.1 to 0.13.2

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, go

#585 - chore: bump k8s.io/apimachinery from 0.29.3 to 0.30.0

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 3 comments
Labels: dependencies, go

#584 - chore: bump anchore/sbom-action from 0.15.10 to 0.15.11 in the all group

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, github_actions

#583 - docs: add source policy docs for debian 12

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago

#582 - ci: mark golangci-lint as blocking

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 1 comment

#581 - fix: added ignore cache to apk update

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 1 comment

#580 - ci: add prefix to ci runs

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 1 comment

#579 - docs: add mention of support for containers without package managers to versioned_docs

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago - 2 comments

#578 - docs: add mention of support for containers without package managers to versioned_docs

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago

#577 - chore: bump the all group in /website with 10 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, javascript

#576 - chore: bump the all group across 1 directory with 9 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, github_actions

#575 - chore: bump github.com/docker/cli from 26.0.0-rc1+incompatible to 26.1.0+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago
Labels: dependencies, go

#574 - chore: bump github.com/quay/claircore from 1.5.25 to 1.5.27

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 2 comments
Labels: dependencies, go

#573 - [REQ] classify CI runs as informing or blocking

Issue - State: closed - Opened by sozercan 5 months ago
Labels: good first issue, CI

#572 - docs: add mention of support for containers without package managers

Pull Request - State: closed - Opened by MiahaCybersec 5 months ago

#571 - chore: update node version to 18.x

Pull Request - State: closed - Opened by ashnamehrotra 5 months ago - 1 comment

#570 - feat: handle distroless for upgrade all packages

Pull Request - State: closed - Opened by ashnamehrotra 5 months ago - 1 comment

#569 - For distroless, copa might need to get list of packages first, since we don't have the package manager tooling.

Issue - State: closed - Opened by ashnamehrotra 5 months ago

#568 - chore: bump github.com/docker/cli from 26.0.0-rc1+incompatible to 26.0.2+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, go

#567 - chore: bump the all group with 8 updates

Pull Request - State: closed - Opened by dependabot[bot] 5 months ago - 1 comment
Labels: dependencies, github_actions

#566 - chore: bump golang.org/x/net from 0.21.0 to 0.23.0

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago
Labels: dependencies, go

#565 - [REQ] windows container support

Issue - State: open - Opened by sozercan 6 months ago - 1 comment
Labels: enhancement, needs-design

#564 - chore: bump the all group in /website with 10 updates

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 2 comments
Labels: dependencies, javascript

#563 - chore: bump the all group with 5 updates

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, github_actions

#562 - chore: bump github.com/docker/cli from 26.0.0-rc1+incompatible to 26.0.1+incompatible

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, go

#561 - chore: bump google.golang.org/grpc from 1.62.1 to 1.63.2

Pull Request - State: closed - Opened by dependabot[bot] 6 months ago - 1 comment
Labels: dependencies, go

#560 - chore: remove ignored cves

Pull Request - State: closed - Opened by sozercan 6 months ago - 1 comment

#559 - [QUESTION] How to resolve "downloaded package perl-Archive-Tar version 2.38-488.cm2 lower than required 5.34.1-489.cm2 for update"

Issue - State: closed - Opened by Miller-Kyle 6 months ago - 2 comments
Labels: question

GitHub / project-copacetic/copacetic issues and pull requests