compare
crane vs Skopeo
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | crane | Skopeo |
|---|---|---|
| Language | Go | Go |
| Licence | Apache-2.0 | Apache-2.0 |
| Stars | 4.1k | 11k |
| Latest | v0.22.1 | v1.24.1 |
| Last push | 2026-10-14 | 2026-10-16 |
| Release cadence | about 15 days between releases | about 30 days between releases |
| Active contributors | 24 commit authors on the default branch in the last 90 days | 14 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
crane replaces Skopeo. Alternatives to Skopeo →
Full replacementCopies, inspects and lists images and tags in registries from a single static binary.
Skopeo replaces crane. Alternatives to crane →
PartialCopies and inspects images across registries and local formats, with signing; no library API.
crane
- v0.22.12026-09-04Reject non-canonical IP literals in all SSRF guards
- v0.22.02026-08-25mutate: let Time and Canonical take tarball.LayerOption
- v0.21.92026-08-05actions: pin slsa generator by version
- v0.21.82026-07-31The artifacts attached to this release are missing SLSA provenance, see #2390.
- v0.21.72026-06-17tarball: return error instead of panicking on missing rootfs.diff_ids
Skopeo
- v1.24.12026-09-16Bump Skopeo to v1.24.1, common 0.69.2, image 5.41.2, storage 1.64.1 to fix CVE-2025-11395
- v1.22.32026-09-16Updates the underlying libraries to fix CVE-2025-11395 .
- v1.24.02026-07-30New skopeo copy options --remove-list-signatures and --strip-removed-platforms
- v1.23.02026-05-26Please Note!
- v1.11.52026-05-14[release-1.11] CVE-2025-65637 Logrus
crane
✓ signed The latest release, v0.22.1, carries a signature GitHub verified.
Loading the security report
Skopeo
✓ signed The latest release, v1.24.1, carries a signature GitHub verified.
Loading the security report