arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
148 Commits 5 Branches 24 Tags 158 MiB
1a5aa88b18
Commit Graph

148 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Quentin Machu
970756cd5a database: do insert/find layers (with their features and vulnerabilities) 2016-02-24 16:32:21 -05:00
Quentin Machu
2c150b015e *: refactor & do initial work towards PostgreSQL implementation 2016-02-24 16:32:21 -05:00
Quentin Machu
1a0f4a0f75 Merge pull request #75 from sjourdan/fix_vuln_typo 
updater: fix typos
 2016-02-23 13:42:35 -05:00
Stephane Jourdan
e91365f4b3 updater: fix typos 2016-02-23 18:07:41 +01:00
Quentin Machu
5469937a7e Merge pull request #73 from maxking/doc 
docs: provide information to run Clair in README
 2016-02-18 09:23:07 -05:00
Quentin Machu
5b951f3244 Merge pull request #74 from mnuessler/causedByPackage 
Add output for package causing vulnerability
 2016-02-18 09:22:26 -05:00
Matthias Nüßler
2300ae9ad7 Add output for package causing vulnerability 
Include the name of package that caused the vulnerability in the
output.
 2016-02-18 15:03:28 +01:00
Abhilash Raj
9329172683 docs: provide information to run Clair in README 
The top level readme for Clair has no instructions on how-to run
Clair. Add a link pointing to the appropriate place.
 2016-02-14 21:05:40 -08:00
Quentin Machu
1866821a80 Merge pull request #70 from liangchenye/read-manifest 
contrib: load image history from 'manifest.json'
 2016-02-14 01:20:14 -05:00
liangchenye
fee0bb5e49 contrib: load image history from 'manifest.json' first due to 
docker 1.10 changes.

Fixes #69

Signed-off-by: liangchenye <liangchenye@huawei.com>
 2016-02-14 14:15:07 +08:00
Quentin Machu
e8b16175ef api: return 400 if we can't extract a layer 2016-02-09 18:13:47 -05:00
Quentin Machu
343ce39865 worker: detect the status code when downloading a layer and expect 2XX. 2016-02-09 16:55:56 -05:00
Quentin Machu
6aa501f18e Merge pull request #67 from Quentin-M/master 
updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay
 2016-01-25 14:24:43 -05:00
Quentin Machu
712aa11b8b updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay 
Reacts to https://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/revision/10488
 2016-01-25 13:04:39 -05:00
Quentin Machu
7b608ceda5 docs: Add missing field in API Example 2016-01-21 11:27:48 -05:00
Quentin Machu
e650eab638 Merge pull request #65 from jzelinskie/fixdockerfile 
dockerfile: syntax updates and s/xz/xz-utils
 2016-01-19 13:38:25 -05:00
Jimmy Zelinskie
ea193d3ae7 dockerfile: syntax updates and s/xz/xz-utils 
This fixes the automated build on Quay.io.
 2016-01-19 13:35:27 -05:00
Quentin Machu
e834301941 Merge pull request #49 from liangchenye/master 
Add DataDetector to support ACI and other layout format
 2016-01-07 10:44:40 -05:00
Quentin Machu
4dc9ea39dd Merge pull request #59 from davidxia/patch1 
Fix typo in doc
 2016-01-04 17:22:30 -05:00
David Xia
f2009513d5 Fix typo in doc 2016-01-04 13:14:12 -05:00
Quentin Machu
11475beb2c Merge pull request #52 from Quentin-M/custom_notifiers 
Custom notifiers
 2015-12-17 18:23:25 -05:00
Quentin Machu
f4a4d417e7 notifier: Rename HTTP to Webhook Notifier 2015-12-17 17:36:12 -05:00
Quentin Machu
2ea86c53f3 notifier: fix a bug that prevented graceful shutdown in certain cases 
- The notifier was never checking if it should shutdown if there were always at least one notification to send
- After a failure, the notifier is supposed to back-off, but when Clair is stopping, the backoff was interrupted immediately and did not retry. Instead it selected a new notification to send (most likely: the same one) and looped quickly/weirdly.
 2015-12-17 17:36:12 -05:00
Quentin Machu
480589a83a notifier: retry upon failure 2015-12-17 17:36:12 -05:00
Quentin Machu
3ff8bfaa93 notifier: Allow custom notifiers to be registered. 2015-12-16 16:08:35 -05:00
Quentin Machu
7ee1481e92 Merge pull request #53 from coreos/ubdater 
updater: Fix Ubuntu's partial update bug.
 2015-12-16 15:46:54 -05:00
Quentin Machu
c055c33cf8 updater: Fix Ubuntu's partial update bug. 
Deferring file closing causes `too many open files` (exceeding fs.file-max) on some platforms!
 2015-12-16 15:42:32 -05:00
Quentin Machu
510b901da6 Merge pull request #46 from coreos/fix_sql_tovalue 
database: Fix incorrect behavior of toValue when reading empty strings.
 2015-12-16 15:09:31 -05:00
Quentin Machu
8c1d3c9a86 *: Fix authentification typo 2015-12-16 12:01:51 -05:00
Liang Chenye
4b11491067 add ImageFormat to worker_test and programs under contrib 
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
 2015-12-15 21:01:22 -08:00
Liang Chenye
41509ccd3e add imageFormt to API.md; add xz to Dockerfile; fix bugs 
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
 2015-12-15 20:29:53 -08:00
Quentin Machu
32747a5f25 database: Don't ignore empty results in toValue(s)() 
There is apparently no reason to ignore empty results - it was probably the case in the past (`null` value).

["", "v"] should be considered invalid by toValue() because it represents two values.
["", "v"] should be returned as it by toValues(), not trimming "".

Tests passes, it will hopefully not cause any issue in prod.
 2015-12-15 15:20:38 -05:00
Quentin Machu
172693b604 Merge pull request #47 from coreos/sn 
notifier: add ServerName configuration for TLS
 2015-12-15 14:31:59 -05:00
Jimmy Zelinskie
34870a2a2b move LoadTLSClientConfigForServer into API package 
This isn't reused any where just yet, so we're best off leaving it local
to the place that needs it.
 2015-12-15 12:09:46 -05:00
Jimmy Zelinskie
b3828c9c4c notifier: add ServerName configuration for TLS 2015-12-15 12:09:46 -05:00
liangchenye
8b649af666 detect bzip2/xz; add test data 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-15 16:08:27 +08:00
liangchenye
354c4b3672 always trim './' 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-15 11:34:22 +08:00
Quentin Machu
d3ebc3df33 Merge pull request #51 from coolljt0725/update_analyze_local_image_doc 
Update README.md of analyze_local_image
 2015-12-14 22:30:47 -05:00
Lei Jitang
5f876d20a6 Update README.md of analyze_local_image 
The latest Clair use config file for configuration, the command line to
run Clair instance is outdate in the README.md

Signed-off-by: Lei Jitang <leijitang@huawei.com>
 2015-12-14 22:35:38 -05:00
Quentin Machu
231e16a72f Merge pull request #50 from coolljt0725/fix_stop 
updater: fix type ctrl^C not stop updating
 2015-12-14 10:18:56 -05:00
Lei Jitang
cd1106dcdc fix type ctrl^C not stop updating 
when clair has network problem during updating vulnerability and failed
to update vulnerability, it will keep updating and even if type ctrl^C
can't stop the clair. This patch make clair to stop updating if type
ctrl^C.

Signed-off-by: Lei Jitang <leijitang@huawei.com>
 2015-12-14 00:48:01 -05:00
liangchenye
d402ae818e use imageFormat in params for consistence 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-11 19:41:32 +08:00
liangchenye
b1775ed3dc add data detector to support ACI and other format in the future 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-11 19:37:25 +08:00
Quentin Machu
9f0ed4dcfb Merge pull request #44 from Quentin-M/configfile 
main: Use configuration file instead of flags and simplify app extension
 2015-12-08 11:56:28 -05:00
Quentin Machu
eb7e5d5c74 main: Use configuration file instead of flags and simplify app extension. 
Clair will now use a YAML configuration file instead of command line
arguments as the number of parameters grows.

Also, Clair now exposes a Boot() func that allows everyone to easily
create their own project and load dynamically their own fetchers/updaters.
 2015-12-08 11:50:52 -05:00
Quentin Machu
ec0decfcaf docs: fix a typo in the model 
Fixes #43
 2015-12-07 18:23:18 -05:00
Quentin Machu
a4dcd3c13a Merge pull request #42 from Quentin-M/triple 
database: Update cayley and use Triple instead of Quad
 2015-12-06 22:27:45 -05:00
Quentin Machu
3fe3f3a4c7 database: Update cayley and use Triple instead of Quad 2015-12-06 20:15:40 -05:00
Quentin Machu
941a10cc2b Merge pull request #35 from mrqwer88/check_openvz_mirror_with_clair 
add tool for check openvz mirrors with clair to contrib
 2015-12-04 18:04:04 -05:00
Quentin Machu
d05a97a0a1 Merge pull request #29 from Quentin-M/notifier_tls 
notifier: Refactor and add client certificate authentification support.
 2015-12-04 16:59:47 -05:00