Credential access
Reads registry credentials, auth files, and image source credentials.
brew / rank 827
Install skopeo with Homebrew, apk, apt, dnf, MacPorts, Nix, pacman, zypper
Work with remote images registries. Version 1.24.1 via Homebrew; verified 2026-09-16. Also installable with debian: sudo apt install skopeo.
agent safety
Agent safety answer
skopeo copies and inspects container images across registries.
Remote mutation
Can copy, sync, delete, or overwrite remote image references.
Publish/artifact risk
Can publish container images and signatures to registries.
Recommended control
Gate copy, sync, delete, and credentialed registry operations.
Agent-use guidance
Allow inspect on public images; require approval for registry writes or private credentials.
install
Additional install commands
macOS
Homebrewverified · 100%
brew install skopeolocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install skopeoMacPorts ports tree · sysutils/skopeo/Portfile · source: api.github.com
Linux
Alpine Linux apkverified · 92%
sudo apk add skopeoAlpine Linux edge package indexes · skopeo · source: dl-cdn.alpinelinux.org
Debian aptverified · 92%
sudo apt install skopeoDebian stable package indexes · skopeo · source: deb.debian.org
Fedora dnfverified · 92%
sudo dnf install skopeoFedora Rawhide package metadata · skopeo · source: dl.fedoraproject.org
Nixverified · 92%
nix profile install nixpkgs#skopeonixpkgs package indexes · pkgs/by-name/sk/skopeo/package.nix · source: api.github.com
Arch Linux pacmanverified · 92%
sudo pacman -S skopeoArch Linux sync databases · skopeo · source: geo.mirror.pkgbuild.com
openSUSE zypperverified · 92%
sudo zypper install skopeoopenSUSE Tumbleweed package metadata · skopeo · source: download.opensuse.org
overview
Package summary
Work with remote images registries
Project links
Commands and aliases
- skopeo
history
Project history and usage
Skopeo is a daemonless command-line utility for inspecting, copying, synchronizing, deleting, signing, and verifying container images across registries and local image formats.
Project history
Skopeo was developed as a command-line interface over the containers/image ecosystem for inspecting and moving container images without requiring a running Docker daemon. Its main manual was authored in 2016 and describes registry inspection, format conversion, copying, deletion, signing, and verification.
The project subsequently gained a broad family of subcommands, OCI support, registry synchronization, authentication management, manifest operations, and Sigstore-related key generation. It is maintained in the podman-container-tools organization while retaining official redirects from the containers namespace.
Adoption history
Skopeo became part of the broader containers project toolchain alongside Podman, Buildah, containers/image, and containers/storage. Packaging across major Linux distributions, Homebrew, MacPorts, Nix, and other systems, as recorded in source_facts.package-manager, made it a standard scripting tool for registry and image workflows.
The maintainers have historically favored distribution packages and an official container image over publishing a single generic static binary, reflecting Skopeo’s integration with platform libraries and container configuration.
How it is used
Typical uses include inspecting a remote image without pulling it, copying an image directly between registries, converting between Docker and OCI layouts, synchronizing repositories for disconnected environments, and logging into private registries. Image references include an explicit transport such as `docker://`, `oci:`, or `dir:`.
Why package nerds care
Skopeo separates image manipulation from running containers. Package and release engineers value its daemonless, usually rootless access to manifests, tags, layers, signatures, and registry-to-registry copies, especially in CI, air-gapped synchronization, and image-promotion pipelines.
Timeline
- 2016: The official Skopeo manual identifies the command and its principal container-image operations.
- 2020: The containers-auth.json manual was originally compiled, documenting authentication shared by Skopeo, Podman, and Buildah.
- 2026: The official release stream reached the v1.23 series.
Related projects
- containers/image supplies transports, authentication, and image-copying primitives.
- Podman and Buildah share authentication and containers configuration with Skopeo.
- OCI image and distribution specifications define important formats handled by Skopeo.
- Docker Registry HTTP API V2 registries are common remote endpoints.
Sources
security posture
Risk level: blue
broad file, network, media, or database tool signal.
Risk classifier
blue risk · medium confidence · tool
Why
- broad file, network, media, or database tool signal
Signals
- text:image
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Installs with 1 runtime dependencies.
- Build metadata lists 3 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
local files
Configuration and credential file locations
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Configuration files
Config paths the tool may read or write during local use.
- Unix
/etc/containers/policy.json/etc/containers/registries.d//etc/containers/storage.conf
Credential files
Credential-bearing paths to review before unattended agent runs.
- Unix
~/.config/containers/auth.json
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
skopeo | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-09-19
manager version1.24.1
manager updated2026-09-16
local dataok
upstreamcurrent
latest detectedv1.24.0
https://github.com/podman-container-tools/skopeo
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:skopeo |
|---|---|
| Version | 1.24.1 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/skopeo |
| Homepage | https://github.com/podman-container-tools/skopeo |
| Repository | https://github.com/podman-container-tools/skopeo |
| License | Apache-2.0 |
| Source archive | https://github.com/podman-container-tools/skopeo/archive/refs/tags/v1.24.0.tar.gz |
| Last updated | 2026-09-16T15:11:21Z |
| Pulse | updated |
| Dependencies | gpgme |
| Build dependencies | go, go-md2man, pkgconf |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | skopeo |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Debian apt95%
skopeo 1.18.0+ds1-1+b5
Tooling to work with remote images registries
https://github.com/containers/skopeo
sudo apt install skopeo- Section: devel
- Architecture: amd64
- Source Package: skopeo
- 4 dependencies
- 1 optional deps
- normalized package name match
- Matched by: Skopeo
Nix95%
skopeo
nix profile install nixpkgs#skopeo- normalized package name match
- Matched by: Skopeo
Ubuntu apt95%
skopeo 1.13.3+ds1-2build2
Tooling to work with remote images registries
https://github.com/containers/skopeo
sudo apt install skopeo- Section: universe/devel
- Architecture: amd64
- 5 dependencies
- normalized package name match
- Matched by: Skopeo
apk95%
skopeo 1.20.1-r1
Work with remote images registries - retrieving information, images, signing content
https://github.com/containers/skopeo
sudo apk add skopeo- License: Apache-2.0
- Architecture: x86_64
- Source Package: skopeo
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
apk95%
skopeo-bash-completion 1.20.1-r1
Bash completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-bash-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: skopeo
- normalized package name match
- Matched by: Skopeo
apk95%
skopeo-doc 1.20.1-r1
Work with remote images registries - retrieving information, images, signing content (documentation)
https://github.com/containers/skopeo
sudo apk add skopeo-doc- License: Apache-2.0
- Architecture: x86_64
- Source Package: skopeo
- normalized package name match
- Matched by: Skopeo
apk95%
skopeo-fish-completion 1.20.1-r1
Fish completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-fish-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: skopeo
- normalized package name match
- Matched by: Skopeo
apk95%
skopeo-zsh-completion 1.20.1-r1
Zsh completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-zsh-completion- License: Apache-2.0
- Architecture: x86_64
- Source Package: skopeo
- normalized package name match
- Matched by: Skopeo
dnf95%
skopeo 1.24.0-2.fc46
Inspect container images and repositories on registries
https://github.com/containers/skopeo
sudo dnf install skopeo- License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: skopeo
- 8 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
dnf95%
skopeo-tests 1.24.0-2.fc46
Test dependencies for skopeo
https://github.com/containers/skopeo
sudo dnf install skopeo-tests- License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT AND MPL-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: skopeo
- 9 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
pacman95%
skopeo 1.24.0-1
A command line utility for various operations on container images and image repositories.
https://github.com/containers/skopeo
sudo pacman -S skopeo- License: Apache-2.0
- Architecture: x86_64
- 4 dependencies
- normalized package name match
- Matched by: Skopeo
zypper95%
skopeo 1.24.0-1.1
Container image repository tool
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo- License: Apache-2.0
- Category: System/Management
- Architecture: x86_64
- Source Package: skopeo
- 3 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
zypper95%
skopeo-bash-completion 1.24.0-1.1
Bash completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-bash-completion- License: Apache-2.0
- Category: System/Management
- Architecture: noarch
- Source Package: skopeo
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
zypper95%
skopeo-fish-completion 1.24.0-1.1
Fish completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-fish-completion- License: Apache-2.0
- Category: System/Management
- Architecture: noarch
- Source Package: skopeo
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
zypper95%
skopeo-zsh-completion 1.24.0-1.1
Zsh completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-zsh-completion- License: Apache-2.0
- Category: System/Management
- Architecture: noarch
- Source Package: skopeo
- 2 dependencies
- 1 provides
- normalized package name match
- Matched by: Skopeo
MacPorts95%
skopeo
sudo port install skopeo- normalized package name match
- Matched by: Skopeo
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- cross-ecosystem install command graph
- curated agent safety answer
- curated configuration and credential file locations
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment
- pkg.so package database
- pkgdb category and tag curation