Fedora 44 native package

skopeo

Inspect container images and repositories on registries

Packages / Fedora 44 / Unspecified / skopeo

[Source: skopeo]

Package: skopeo (1:1.22.2-2.fc44)

[Project overview: skopeo]

External Resources:

Homepage: [github.com]

Similar packages:

[skopeo-tests]
Test dependencies for skopeo

Inspect container images and repositories on registries

Command line utility to inspect images and repositories directly on Docker registries without the need to pull them.

Other Packages Related to skopeo:

dep: [containers-common] (>= 4:1-21)
Common configuration and documentation for containers
dep: libgpgme.so.45()(64bit)
Package not available
dep: libgpgme.so.45(GPGME_1.0)(64bit)
Package not available
dep: libgpgme.so.45(GPGME_1.1)(64bit)
Package not available
dep: libresolv.so.2()(64bit)
Package not available
dep: libsqlite3.so.0()(64bit)
Package not available
dep: libsubid.so.5()(64bit)
Package not available
dep: [podman-sequoia]
Polyfill to use Sequoia as a signing backend for containers
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.38)(64bit)
Package not available

Download skopeo

Architecture	Package Size	Installed Size	Files
x86_64	7.8 MiB	25 MiB	[list of files]

Package file paths (32)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/skopeo
/usr/lib/.build-id
/usr/lib/.build-id/49
/usr/lib/.build-id/49/6227a7cfe68fbc58de0d254ec0845397343dc9
/usr/lib/.build-id/5e
/usr/lib/.build-id/5e/453ec041abb92f42f980557901e32942d499ff
/usr/lib/.build-id/cf
/usr/lib/.build-id/cf/06f094cc60f5b5ad0320b3c88918f9c484bfb2
/usr/lib/.build-id/cf/441f717697eccc9adc5b4249da4eb0b859830e
/usr/share/bash-completion
/usr/share/bash-completion/completions
/usr/share/bash-completion/completions/skopeo
/usr/share/doc/skopeo
/usr/share/doc/skopeo/README.md
/usr/share/fish/vendor_completions.d
/usr/share/fish/vendor_completions.d/skopeo.fish
/usr/share/licenses/skopeo
/usr/share/licenses/skopeo/LICENSE
/usr/share/man/man1/skopeo.1.gz
/usr/share/man/man1/skopeo-copy.1.gz
/usr/share/man/man1/skopeo-delete.1.gz
/usr/share/man/man1/skopeo-generate-sigstore-key.1.gz
/usr/share/man/man1/skopeo-inspect.1.gz
/usr/share/man/man1/skopeo-list-tags.1.gz
/usr/share/man/man1/skopeo-login.1.gz
/usr/share/man/man1/skopeo-logout.1.gz
/usr/share/man/man1/skopeo-manifest-digest.1.gz
/usr/share/man/man1/skopeo-standalone-sign.1.gz
/usr/share/man/man1/skopeo-standalone-verify.1.gz
/usr/share/man/man1/skopeo-sync.1.gz
/usr/share/zsh/site-functions
/usr/share/zsh/site-functions/_skopeo

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 44 in the browser Build an image that includes skopeo

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1:1.22.2-2.fc44	44 / updates	x86_64	Fedora 44 · updates · x86_64	7.8 MiB	25 MiB	Packages/s/skopeo-1.22.2-2.fc44.x86_64.rpm
1:1.22.0-2.fc44	44 / everything	x86_64	Fedora 44 · Everything · x86_64	7.7 MiB	25 MiB	Packages/s/skopeo-1.22.0-2.fc44.x86_64.rpm

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1:1.22.2-2.fc44 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: fce3d08563387322fd6840575f7fbec3f7fdbc71c7949a8eb7893c4f9ba486a7

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'fce3d08563387322fd6840575f7fbec3f7fdbc71c7949a8eb7893c4f9ba486a7' 'skopeo-1.22.2-2.fc44.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

1:1.22.0-2.fc44 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: f1619875a3c787e358cca5f3eafc37c85c24d29d7fc9877ed65f0916ba663f28

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'f1619875a3c787e358cca5f3eafc37c85c24d29d7fc9877ed65f0916ba663f28' 'skopeo-1.22.0-2.fc44.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee, Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991, Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b, Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 44 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=aarch64
Signed-object SHA-256
236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=x86_64
Signed-object SHA-256
1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=aarch64
Signed-object SHA-256
2ec0ba92e556309075d8efe3c3301b36bb7ecd47c4e17566f0192c9c5436ed5f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=x86_64
Signed-object SHA-256
a69a0ab020457a7af2515066b7caccb3950bcf9dc7bedb52b1850098d9857ae1
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified