diff --git a/data/clients/docker-client.yaml b/data/clients/docker-client.yaml
index fd1261633..6be4c3c79 100644
--- a/data/clients/docker-client.yaml
+++ b/data/clients/docker-client.yaml
@@ -58,3 +58,10 @@
     all:
       - path.startsWith("/v2/")
       - userAgent.contains("Renovate/")
+
+- name: allow-skopeo
+  action: ALLOW
+  expression:
+    all:
+      - path.startsWith("/v2/")
+      - userAgent.contains("skopeo/")
diff --git a/docs/docs/CHANGELOG.md b/docs/docs/CHANGELOG.md
index bbc9be50b..4c9011467 100644
--- a/docs/docs/CHANGELOG.md
+++ b/docs/docs/CHANGELOG.md
@@ -23,6 +23,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Add support to simple Valkey/Redis cluster mode
 - Open Graph passthrough now reuses the configured target Host/SNI/TLS settings, so metadata fetches succeed when the upstream certificate differs from the public domain. ([1283](https://github.com/TecharoHQ/anubis/pull/1283))
 - Stabilize the CVE-2025-24369 regression test by always submitting an invalid proof instead of relying on random POW failures.
+- Add Skopeo to the builtin list of common Docker clients
 
 ### Deprecate `report_as` in challenge configuration