You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
|Andy 0085d3e042||4 years ago|
|.github||5 years ago|
|Documentation||4 years ago|
|api||4 years ago|
|cmd/clair||4 years ago|
|contrib||4 years ago|
|database||4 years ago|
|ext||4 years ago|
|pkg||4 years ago|
|testdata/DistUpgrade||6 years ago|
|vendor||4 years ago|
|.dockerignore||5 years ago|
|.drone.yml||4 years ago|
|.travis.yml||4 years ago|
|DCO||8 years ago|
|Dockerfile||5 years ago|
|LICENSE||8 years ago|
|NOTICE||8 years ago|
|README.md||4 years ago|
|ROADMAP.md||5 years ago|
|analyzer.go||4 years ago|
|ancestry.go||4 years ago|
|ancestry_test.go||4 years ago|
|bill-of-materials.json||5 years ago|
|blob.go||4 years ago|
|code-of-conduct.md||5 years ago|
|config.yaml.sample||4 years ago|
|glide.lock||4 years ago|
|glide.yaml||4 years ago|
|license_header_test.go||4 years ago|
|notifier.go||4 years ago|
|updater.go||4 years ago|
|updater_test.go||4 years ago|
master branch may be in an unstable or even broken state during development.
Please use releases instead of the
master branch in order to get stable binaries.
Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).
- In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
- Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
- Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
- When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.
Our goal is to enable a more transparent view of the security of container-based infrastructure.
Thus, the project was named
Clair after the French term which translates to clear, bright, transparent.
- Learn the terminology and about the drivers and data sources that power Clair
- Watch presentations on the high-level goals and design of Clair
- Follow instructions to get Clair up and running
- Explore the API on SwaggerHub
- Discover third party integrations that help integrate Clair with your infrastructure
- Read the rest of the documentation on the CoreOS website or in the Documentation directory
- IRC: #clair on freenode.org
- Bugs: issues
See CONTRIBUTING for details on submitting patches and the contribution workflow.
Clair is under the Apache 2.0 license. See the LICENSE file for details.