Credential-Zugriff
Reads registry credentials, auth files, and image source credentials.
brew / Rang 827
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für skopeo in AI-Agent-Workflows.
Agent-Sicherheit
skopeo copies and inspects container images across registries.
Reads registry credentials, auth files, and image source credentials.
Can copy, sync, delete, or overwrite remote image references.
Can publish container images and signatures to registries.
Gate copy, sync, delete, and credentialed registry operations.
Allow inspect on public images; require approval for registry writes or private credentials.
Installation
brew install skopeolocal Homebrew formula metadata
sudo port install skopeoMacPorts ports tree · sysutils/skopeo/Portfile · Quelle: api.github.com
sudo apk add skopeoAlpine Linux edge package indexes · skopeo · Quelle: dl-cdn.alpinelinux.org
sudo apt install skopeoDebian stable package indexes · skopeo · Quelle: deb.debian.org
sudo dnf install skopeoFedora Rawhide package metadata · skopeo · Quelle: dl.fedoraproject.org
nix profile install nixpkgs#skopeonixpkgs package indexes · pkgs/by-name/sk/skopeo/package.nix · Quelle: api.github.com
sudo pacman -S skopeoArch Linux sync databases · skopeo · Quelle: geo.mirror.pkgbuild.com
sudo zypper install skopeoopenSUSE Tumbleweed package metadata · skopeo · Quelle: download.opensuse.org
Überblick
Work with remote images registries
Verlauf
Skopeo is a daemonless command-line utility for inspecting, copying, synchronizing, deleting, signing, and verifying container images across registries and local image formats.
Skopeo was developed as a command-line interface over the containers/image ecosystem for inspecting and moving container images without requiring a running Docker daemon. Its main manual was authored in 2016 and describes registry inspection, format conversion, copying, deletion, signing, and verification.
The project subsequently gained a broad family of subcommands, OCI support, registry synchronization, authentication management, manifest operations, and Sigstore-related key generation. It is maintained in the podman-container-tools organization while retaining official redirects from the containers namespace.
Skopeo became part of the broader containers project toolchain alongside Podman, Buildah, containers/image, and containers/storage. Packaging across major Linux distributions, Homebrew, MacPorts, Nix, and other systems, as recorded in source_facts.package-manager, made it a standard scripting tool for registry and image workflows.
The maintainers have historically favored distribution packages and an official container image over publishing a single generic static binary, reflecting Skopeo’s integration with platform libraries and container configuration.
Typical uses include inspecting a remote image without pulling it, copying an image directly between registries, converting between Docker and OCI layouts, synchronizing repositories for disconnected environments, and logging into private registries. Image references include an explicit transport such as `docker://`, `oci:`, or `dir:`.
Skopeo separates image manipulation from running containers. Package and release engineers value its daemonless, usually rootless access to manifests, tags, layers, signatures, and registry-to-registry copies, especially in CI, air-gapped synchronization, and image-promotion pipelines.
Sicherheitslage
broad file, network, media, or database tool signal.
blue Risiko · mittel Konfidenz · tool
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Config paths the tool may read or write during local use.
/etc/containers/policy.json/etc/containers/registries.d//etc/containers/storage.confCredential-bearing paths to review before unattended agent runs.
~/.config/containers/auth.jsonExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
skopeo | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://github.com/podman-container-tools/skopeo
Installationsmetadaten
| Paketschlüssel | brew:skopeo |
|---|---|
| Version | 1.24.1 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/skopeo |
| Homepage | https://github.com/podman-container-tools/skopeo |
| Repository | https://github.com/podman-container-tools/skopeo |
| Lizenz | Apache-2.0 |
| Quellarchiv | https://github.com/podman-container-tools/skopeo/archive/refs/tags/v1.24.0.tar.gz |
| Zuletzt aktualisiert | 2026-09-16T15:11:21Z |
| Pulse | updated |
| Abhängigkeiten | gpgme |
| Build-Abhängigkeiten | go, go-md2man, pkgconf |
| Bottle | verfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | skopeo |
| Version Scheme | 0 |
| Revision | 0 |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
skopeo 1.18.0+ds1-1+b5
Tooling to work with remote images registries
https://github.com/containers/skopeo
sudo apt install skopeoskopeo
nix profile install nixpkgs#skopeoskopeo 1.13.3+ds1-2build2
Tooling to work with remote images registries
https://github.com/containers/skopeo
sudo apt install skopeoskopeo 1.20.1-r1
Work with remote images registries - retrieving information, images, signing content
https://github.com/containers/skopeo
sudo apk add skopeoskopeo-bash-completion 1.20.1-r1
Bash completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-bash-completionskopeo-doc 1.20.1-r1
Work with remote images registries - retrieving information, images, signing content (documentation)
https://github.com/containers/skopeo
sudo apk add skopeo-docskopeo-fish-completion 1.20.1-r1
Fish completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-fish-completionskopeo-zsh-completion 1.20.1-r1
Zsh completions for skopeo
https://github.com/containers/skopeo
sudo apk add skopeo-zsh-completionskopeo 1.24.0-2.fc46
Inspect container images and repositories on registries
https://github.com/containers/skopeo
sudo dnf install skopeoskopeo-tests 1.24.0-2.fc46
Test dependencies for skopeo
https://github.com/containers/skopeo
sudo dnf install skopeo-testsskopeo 1.24.0-1
A command line utility for various operations on container images and image repositories.
https://github.com/containers/skopeo
sudo pacman -S skopeoskopeo 1.24.0-1.1
Container image repository tool
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeoskopeo-bash-completion 1.24.0-1.1
Bash completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-bash-completionskopeo-fish-completion 1.24.0-1.1
Fish completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-fish-completionskopeo-zsh-completion 1.24.0-1.1
Zsh completion for skopeo
https://github.com/podman-container-tools/skopeo
sudo zypper install skopeo-zsh-completionskopeo
sudo port install skopeoQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.