Cupdate

Cudate is a zero-configuration service that helps users keep container images up to date. It automatically identifies container images in use in Kubernetes clusters or Docker and Podman (currently in beta) hosts, and identifies the latest available versions. Cudate provides a user interface, API and RSS subscription capabilities that allow users to easily access update information and release notes. In addition, it also supports vulnerability scanning, including checking images of services such as Docker Hub, Quay, GitHub Advisors and OSV. Cudate supports multiple registries and data sources, such as Docker Hub, GitHub Container Registry, GitLab, and OpenSSF Scorecard reports. Users can deploy Cupdate through Kubernetes, Docker, or Podman, which is designed to be lightweight and efficient, consuming almost no CPU and memory resources. Cudate also provides metrics and tracking capabilities to support monitoring needs. Vulndb is a small sqlite database used by Cupdate to statically find known container mirroring vulnerabilities based on source code repositories.