# cupdate

> Self-hosted service that discovers container images in Kubernetes, Docker, or Podman and checks for updates and vulnerabilities via UI, API, and RSS.

- **Category:** Container Management
- **Licence:** MIT
- **Latest version:** v0.25.0
- **Open source:** oss
- **Languages:** Typescript, Go
- **Platforms:** Docker, Kubernetes, Podman
- **Tags:** Grafana, REST API, Opentelemetry, Podman, Prometheus Metrics, Vulnerability Scanning, Kubernetes, Docker, Rss Feed, Self Hosted, Container Security, Update, K8s, Image Updates, Oci Registry

## Description

Cupdate is a lightweight, zero-configuration service designed to help operators keep their container images secure and up-to-date. It automatically discovers images in use across Kubernetes clusters, Docker hosts, or Podman (via Docker-compatible socket) and checks for newer versions and vulnerabilities from sources like Docker Scout, Clair, GitHub Advisories, and OSV. Results are presented in a web dashboard with light and dark modes, and are also accessible via REST API and RSS feeds. Cupdate runs as a single container with minimal resource usage, storing state in SQLite and cache in BoltDB. It supports a wide range of OCI registries and can be deployed via Kubernetes manifests, Docker Compose, or a static image list. The project is MIT-licensed and actively maintained.

## Links

- [Homepage](https://github.com/AlexGustafsson/cupdate)
- [Website](https://alexgustafsson.github.io/cupdate/)
- [Docker](ghcr.io/alexgustafsson/cupdate)
- [Demo](https://alexgustafsson.github.io/cupdate)
- [GitHub Repository](https://github.com/AlexGustafsson/cupdate)
- [Releases](https://github.com/AlexGustafsson/cupdate/releases)
- [Vulndb OCI Artifact](https://github.com/AlexGustafsson/cupdate/pkgs/container/cupdate%2Fvulndb)

---
Source: https://selfhost.directory/project/cupdate