|Andy 0085d3e042||4 years ago|
|.github||4 years ago|
|Documentation||4 years ago|
|api||4 years ago|
|cmd/clair||4 years ago|
|contrib||4 years ago|
|database||4 years ago|
|ext||4 years ago|
|pkg||4 years ago|
|testdata/DistUpgrade||6 years ago|
|vendor||4 years ago|
|.dockerignore||4 years ago|
|.drone.yml||4 years ago|
|.travis.yml||4 years ago|
|DCO||7 years ago|
|Dockerfile||4 years ago|
|LICENSE||7 years ago|
|NOTICE||7 years ago|
|README.md||4 years ago|
|ROADMAP.md||4 years ago|
|analyzer.go||4 years ago|
|ancestry.go||4 years ago|
|ancestry_test.go||4 years ago|
|bill-of-materials.json||4 years ago|
|blob.go||4 years ago|
|code-of-conduct.md||5 years ago|
|config.yaml.sample||4 years ago|
|glide.lock||4 years ago|
|glide.yaml||4 years ago|
|license_header_test.go||4 years ago|
|notifier.go||4 years ago|
|updater.go||4 years ago|
|updater_test.go||4 years ago|
master branch may be in an unstable or even broken state during development.
Please use releases instead of the
master branch in order to get stable binaries.
- In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
- Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
- Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
- When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.
Our goal is to enable a more transparent view of the security of container-based infrastructure.
Thus, the project was named
Clair after the French term which translates to clear, bright, transparent.
- Learn the terminology and about the drivers and data sources that power Clair
- Watch presentations on the high-level goals and design of Clair
- Follow instructions to get Clair up and running
- Explore the API on SwaggerHub
- Discover third party integrations that help integrate Clair with your infrastructure
- Read the rest of the documentation on the CoreOS website or in the Documentation directory
- IRC: #clair on freenode.org
- Bugs: issues
See CONTRIBUTING for details on submitting patches and the contribution workflow.
Clair is under the Apache 2.0 license. See the LICENSE file for details.