skopeo

Skopeo is a daemonless CLI for inspecting and moving container images across registries, archives, OCI layouts, and local container stores. It is built for registry-facing workflows like metadata inspection, image promotion, mirroring, signing, and trust verification.

• Inspect remote image metadata, config, layers, and available tags without pulling the image or starting a container daemon.
• Copy or sync images between registries, OCI layouts, archives, local directories, and container stores for promotion, mirroring, and air-gapped transfers.
• Sign, verify, or delete images and enforce trust-policy checks as part of registry publishing or verification workflows.

• inspect and list-tags return structured JSON by default, so agents can query registries and branch on manifest or tag data directly.
• The CLI exposes direct subcommands and flags instead of an interactive UI, and login supports --password-stdin for unattended auth flows.
• Write-heavy paths such as copy, sync, login, and delete mostly communicate through exit status, logs, and optional digest files, so automation usually pairs them with follow-up inspection.

• Registry operations depend on credentials, TLS settings, and signature policy state, so unattended runs need that environment prepared first.
• delete is registry-specific and can remove the underlying manifest behind multiple tags, not just the tag you named.