skopeo

What problem does it solve?

This Skill enables users to interact with container registries without a Docker daemon, allowing safe inspection, verification, and cross-registry image management using skopeo with Vault-backed credentials.

Core Features & Use Cases

• Inspect image metadata and layers without pulling the image.
• List tags and verify digests across registries (Harbor, Docker Hub, Quay, GHCR).
• Copy or retag images within the same registry or across registries with securely retrieved credentials.
• Verify image architecture, OS, and manifest details to ensure compatibility.
• Follow a strict SOP for risky operations with explicit user confirmations and TLS handling for private registries.

Quick Start

Run a quick example against Harbor: retrieve Vault credentials at runtime and execute a command like: skopeo inspect --tls-verify=false --creds "${HARBOR_USER}:${HARBOR_PASS}" docker://harbor.bjzy.me/awx-custom/awx-custom-ee:1.0.17