bd17dfb5e1
database: ensure that concurrent vulnerability/feature versions insertions work fine
9 years ago
74fc5b3e66
database: add missing transaction commits and close opened statement before inserting feature versions.
9 years ago
c5d1a8e5f7
database: update vulnerabilities only when necessary
9 years ago
7e72eb10b6
updater: ignore Debian's "temp" vulnerabilities
9 years ago
77387af2ac
updater: port updater and its fetchers
9 years ago
fd6fdbd3f9
docs: update config example
9 years ago
452f7018ec
updater: move each fetcher to its own package
9 years ago
1b53142e38
database: allow removing fixed packages in vulnerabilities
9 years ago
7c70fc1c20
database: add initial vulnerability support
9 years ago
3a786ae020
database: add lock support
9 years ago
6a9cf21fd4
database: log and mask SQL errors
9 years ago
970756cd5a
database: do insert/find layers (with their features and vulnerabilities)
9 years ago
2c150b015e
*: refactor & do initial work towards PostgreSQL implementation
9 years ago
1a0f4a0f75
Merge pull request #75 from sjourdan/fix_vuln_typo
...
updater: fix typos
9 years ago
e91365f4b3
updater: fix typos
9 years ago
5469937a7e
Merge pull request #73 from maxking/doc
...
docs: provide information to run Clair in README
9 years ago
5b951f3244
Merge pull request #74 from mnuessler/causedByPackage
...
Add output for package causing vulnerability
9 years ago
2300ae9ad7
Add output for package causing vulnerability
...
Include the name of package that caused the vulnerability in the
output.
9 years ago
9329172683
docs: provide information to run Clair in README
...
The top level readme for Clair has no instructions on how-to run
Clair. Add a link pointing to the appropriate place.
9 years ago
1866821a80
Merge pull request #70 from liangchenye/read-manifest
...
contrib: load image history from 'manifest.json'
9 years ago
fee0bb5e49
contrib: load image history from 'manifest.json' first due to
...
docker 1.10 changes.
Fixes #69
Signed-off-by: liangchenye <liangchenye@huawei.com>
9 years ago
e8b16175ef
api: return 400 if we can't extract a layer
9 years ago
343ce39865
worker: detect the status code when downloading a layer and expect 2XX.
9 years ago
6aa501f18e
Merge pull request #67 from Quentin-M/master
...
updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay
9 years ago
712aa11b8b
updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay
...
Reacts to https://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/revision/10488
9 years ago
7b608ceda5
docs: Add missing field in API Example
9 years ago
e650eab638
Merge pull request #65 from jzelinskie/fixdockerfile
...
dockerfile: syntax updates and s/xz/xz-utils
9 years ago
ea193d3ae7
dockerfile: syntax updates and s/xz/xz-utils
...
This fixes the automated build on Quay.io.
9 years ago
e834301941
Merge pull request #49 from liangchenye/master
...
Add DataDetector to support ACI and other layout format
9 years ago
4dc9ea39dd
Merge pull request #59 from davidxia/patch1
...
Fix typo in doc
9 years ago
f2009513d5
Fix typo in doc
9 years ago
11475beb2c
Merge pull request #52 from Quentin-M/custom_notifiers
...
Custom notifiers
9 years ago
f4a4d417e7
notifier: Rename HTTP to Webhook Notifier
9 years ago
2ea86c53f3
notifier: fix a bug that prevented graceful shutdown in certain cases
...
- The notifier was never checking if it should shutdown if there were always at least one notification to send
- After a failure, the notifier is supposed to back-off, but when Clair is stopping, the backoff was interrupted immediately and did not retry. Instead it selected a new notification to send (most likely: the same one) and looped quickly/weirdly.
9 years ago
480589a83a
notifier: retry upon failure
9 years ago
3ff8bfaa93
notifier: Allow custom notifiers to be registered.
9 years ago
7ee1481e92
Merge pull request #53 from coreos/ubdater
...
updater: Fix Ubuntu's partial update bug.
9 years ago
c055c33cf8
updater: Fix Ubuntu's partial update bug.
...
Deferring file closing causes `too many open files` (exceeding fs.file-max) on some platforms!
9 years ago
510b901da6
Merge pull request #46 from coreos/fix_sql_tovalue
...
database: Fix incorrect behavior of toValue when reading empty strings.
9 years ago
8c1d3c9a86
*: Fix `authentification` typo
9 years ago
4b11491067
add ImageFormat to worker_test and programs under contrib
...
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
9 years ago
41509ccd3e
add imageFormt to API.md; add xz to Dockerfile; fix bugs
...
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
9 years ago
32747a5f25
database: Don't ignore empty results in toValue(s)()
...
There is apparently no reason to ignore empty results - it was probably the case in the past (`null` value).
["", "v"] should be considered invalid by toValue() because it represents two values.
["", "v"] should be returned as it by toValues(), not trimming "".
Tests passes, it will hopefully not cause any issue in prod.
9 years ago
172693b604
Merge pull request #47 from coreos/sn
...
notifier: add ServerName configuration for TLS
9 years ago
34870a2a2b
move LoadTLSClientConfigForServer into API package
...
This isn't reused any where just yet, so we're best off leaving it local
to the place that needs it.
9 years ago
b3828c9c4c
notifier: add ServerName configuration for TLS
9 years ago
8b649af666
detect bzip2/xz; add test data
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
9 years ago
354c4b3672
always trim './'
...
Signed-off-by: liangchenye <liangchenye@huawei.com>
9 years ago
d3ebc3df33
Merge pull request #51 from coolljt0725/update_analyze_local_image_doc
...
Update README.md of analyze_local_image
9 years ago
5f876d20a6
Update README.md of analyze_local_image
...
The latest Clair use config file for configuration, the command line to
run Clair instance is outdate in the README.md
Signed-off-by: Lei Jitang <leijitang@huawei.com>
9 years ago
Quentin Machu