macOS
Homebrewverified · 100%
brew install container-canarylocal Homebrew formula metadata
brew
Install container-canary with Homebrew, dnf
Test and validate container requirements against versioned manifests. Version 0.5.0 via Homebrew; verified 2026-05-11.
install
Additional install commands
Linux
Fedora dnfverified · 92%
sudo dnf install dummy-package-canaryFedora Rawhide package metadata · dummy-package-canary · source: dl.fedoraproject.org
overview
Package summary
Test and validate container requirements against versioned manifests
Project links
Commands and aliases
- canary
history
Project history and usage
Container Canary is an NVIDIA container validation CLI for checking image requirements against versioned manifests. Its history is tied to CI-oriented validation of bring-your-own-container platforms rather than to a broad runtime or orchestration layer.
Project history
The project presents itself as a tool for recording platform requirements as a manifest and validating container images against that manifest. Official releases began with v0.1.0 in March 2022, with later 0.x releases continuing through 2025.
Adoption history
Official documentation illustrates the tool with a Kubeflow Notebooks-style requirements manifest, but it does not publish a broad adopter list. The safest reading is that Container Canary serves teams that need repeatable image conformance checks for managed compute or notebook platforms.
How it is used
Users run the `canary` command against a YAML validator file and a target container image. The checks borrow concepts from Kubernetes probes, including exec, HTTP, and TCP socket tests, so it fits naturally into CI pipelines already using container and Kubernetes vocabulary.
Why package nerds care
For package managers, Container Canary is a small Go CLI whose value is in making container-image policy testable and versioned. It is useful when a package ecosystem needs to validate that images contain expected users, ports, services, or files before publishing or deploying them.
Timeline
- 2022: v0.1.0 release published.
- 2024: v0.3.0 and v0.4.0 releases published.
- 2025: v0.5.0 release published.
Related projects
- The README connects Container Canary concepts to Kubernetes probes and uses Kubeflow Notebooks requirements as its main worked example.
Sources
security posture
Risk level: orange
infrastructure mutation or orchestration signal.
Risk classifier
orange risk · medium confidence · infrastructure
Why
- infrastructure mutation or orchestration signal
Signals
- text:container
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
canary | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-07
manager version0.5.0
manager updated2026-05-11
local dataok
upstreamcurrent
latest detectedv0.5.0
https://github.com/NVIDIA/container-canary
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:container-canary |
|---|---|
| Version | 0.5.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/container-canary |
| Homepage | https://github.com/NVIDIA/container-canary |
| Repository | https://github.com/NVIDIA/container-canary |
| Upstream docs | https://github.com/NVIDIA/container-canary#readme |
| License | Apache-2.0 |
| Source archive | https://github.com/NVIDIA/container-canary/archive/refs/tags/v0.5.0.tar.gz |
| Last updated | 2026-05-11T17:43:30-04:00 |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | container-canary |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
dnf92%
dummy-package-canary 2-25.fc44
Dummy package to exercise the packaging stack
sudo dnf install dummy-package-canary- License: CC-PDDC
- Category: Unspecified
- Architecture: noarch
- Source Package: dummy-package-canary
- 2 provides
- installed executable or alias match
- Matched by: Canary
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment