Add Copa to patch all docker image vulnerabilities reported by Trivy

[SaptarshiSarkar12]

Description

Trivy has detected many vulnerabilities for drifty-cli and drifty-gui docker images along with fixed versions for some. So, an automated fixing of those and any future vulnerabilities must be implemented. Copacetic has proven to be the right tool for auto-fixing those vulnerabilities. They also have created a GitHub Actions to automate the fix.

Additional information

For now, some vulnerabilities (might be false positive; not confirmed yet), copa fails to patch the update. Here are some links to issues regarding the same:

• False Positives being reported from Trivy 0.24.2 - oraclelinux:8 image aquasecurity/trivy#1967
• [BUG] Copa fails to patch all fixed CVEs for Oracle Linux (9-slim) docker image project-copacetic/copacetic#762

Those CVEs have FIPS packages as their fixed versions which might be a clue to the cause of failure of copa.

Do you want to work on this issue?

Yes

[github-actions]

Hello 👋! Thank you very much for raising an issue 🙌! The maintainers will get back to you soon for discussion over the issue! 🚀

Meanwhile you can also discuss about the project in our Discord Server 😀