Skip to content

Commit

Permalink
docs: add mention of support for containers without package managers (#…
Browse files Browse the repository at this point in the history
…572)

Signed-off-by: MiahaCybersec <143584635+MiahaCybersec@users.noreply.github.com>
  • Loading branch information
MiahaCybersec authored Apr 25, 2024
1 parent 250ab33 commit 13f0238
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion website/docs/introduction.md
Original file line number Diff line number Diff line change
Expand Up @@ -36,10 +36,11 @@ This approach is motivated by the core principles of making direct container pat

- **Copa supports patching _existing_ container images**.
- Devs don't need to build their images using specific tools or modify them in some way just to support container patching.
- **Copa supports containers without package managers _including_ distroless containers**
- **Copa works with the existing vulnerability scanning and mitigation ecosystems**.
- Image publishers don't need to create new workflows for container patching since Copa supports patching container images using the security update packages already being published today.
- Consumers do not need to migrate to a new and potentially more limited support ecosystem for custom distros or change their container vulnerability scanning pipelines to include remediation, since Copa can be integrated seamlessly as an extra step to patch containers based on those scanning reports.
- **Copa reduces the technical expertise needed and waiting on dependencies needed to patch an image**.
- For OS package vulnerabilities, no specialized knowledge about a specific image is needed to be patch it as Copa relies on the vulnerability remediation knowledge already embedded in the reports produced by popular container scanning tools today.

For more details, refer to the [copa design](./design.md) documentation.
For more details, refer to the [copa design](./design.md) documentation.

0 comments on commit 13f0238

Please sign in to comment.