Copacetic

CLI tool (copa) that directly patches OS-level vulnerabilities in existing container images using BuildKit, without a full rebuild. Consumes vulnerability reports from scanners such as Trivy to apply targeted security updates, shrinking the remediation loop in CI/CD pipelines.