Repolode
Submit
AlexGustafsson

AlexGustafsson/cupdate

A zero-config service that finds container images running in Kubernetes, Docker or Podman, checks for newer versions and vulnerabilities, and exposes the results via UI, API and RSS.

View on GitHubWebsite
Stars
312
Forks
10
Open issues
32
Last commit
4 days ago

What is it?

Cupdate scans the container images in use in a Kubernetes cluster or on Docker and Podman hosts, then looks up the latest available version of each image. The results, along with release notes, image dependants and vulnerability data, are shown in a web UI, available through an API, or subscribed to via an RSS feed.

Cupdate is aimed at people who want to review what is outdated and what new releases bring. It does not apply updates itself; it can serve as a dashboard alongside tools such as Renovate or Dependabot, and its APIs can be used to script custom integrations.

Vulnerability information comes from Docker Scout, Clair for Quay images, GitHub Advisories via a bundled vulndb database, and osv.dev for images with SBOMs. Supported registries include Docker Hub, GHCR, Quay, GCR, GitLab and other OCI-compliant registries.

Key features

  • 01Automatically detects images in use in Kubernetes, Docker or Podman hosts
  • 02Finds the latest available version for each detected image
  • 03Vulnerability scanning via Docker Scout, Clair, GitHub Advisories and osv.dev
  • 04Graphs showing which workloads depend on each image version
  • 05UI, API and RSS feed for browsing and subscribing to updates

Use cases

  • Keeping track of outdated images across a Kubernetes cluster
  • Reviewing release notes and vulnerabilities before upgrading self-hosted services
  • Feeding update data into custom scripts or a dependency-update bot

In collections

Self-hosted apps

Topics

#containers#kubernetes#docker#self-hosted#image-updates#vulnerability-scanning#rss#k8s#update

FAQ

What is cupdate?
A zero-config service that finds container images running in Kubernetes, Docker or Podman, checks for newer versions and vulnerabilities, and exposes the results via UI, API and RSS. Cupdate scans the container images in use in a Kubernetes cluster or on Docker and Podman hosts, then looks up the latest available version of each image. The results, along with release notes, image dependants and vulnerability data, are shown in a web UI, available through an API, or subscribed to via an RSS feed.
Is cupdate free to use? What license does it have?
cupdate is open source under the MIT license. Check the license terms before using it in commercial products.
Is cupdate still maintained?
Actively maintained. The last commit to cupdate was on Nov 3, 2026.
What can I use cupdate for?
Keeping track of outdated images across a Kubernetes cluster Reviewing release notes and vulnerabilities before upgrading self-hosted services Feeding update data into custom scripts or a dependency-update bot
Where can I get cupdate?
The source code and installation instructions are on GitHub: https://github.com/AlexGustafsson/cupdate

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects