arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
542 Commits 5 Branches 24 Tags 158 MiB
821a608bb1
Commit Graph

542 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Matthias Nüßler
2300ae9ad7 Add output for package causing vulnerability 
Include the name of package that caused the vulnerability in the
output.
 2016-02-18 15:03:28 +01:00
Abhilash Raj
9329172683 docs: provide information to run Clair in README 
The top level readme for Clair has no instructions on how-to run
Clair. Add a link pointing to the appropriate place.
 2016-02-14 21:05:40 -08:00
Quentin Machu
1866821a80 Merge pull request #70 from liangchenye/read-manifest 
contrib: load image history from 'manifest.json'
 2016-02-14 01:20:14 -05:00
liangchenye
fee0bb5e49 contrib: load image history from 'manifest.json' first due to 
docker 1.10 changes.

Fixes #69

Signed-off-by: liangchenye <liangchenye@huawei.com>
 2016-02-14 14:15:07 +08:00
Quentin Machu
e8b16175ef api: return 400 if we can't extract a layer 2016-02-09 18:13:47 -05:00
Quentin Machu
343ce39865 worker: detect the status code when downloading a layer and expect 2XX. 2016-02-09 16:55:56 -05:00
Quentin Machu
6aa501f18e Merge pull request #67 from Quentin-M/master 
updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay
 2016-01-25 14:24:43 -05:00
Quentin Machu
712aa11b8b updater: Add support for Ubuntu Vivid Core and ignore Vivid PhoneOverlay 
Reacts to https://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/master/revision/10488
 2016-01-25 13:04:39 -05:00
Quentin Machu
7b608ceda5 docs: Add missing field in API Example 2016-01-21 11:27:48 -05:00
Quentin Machu
e650eab638 Merge pull request #65 from jzelinskie/fixdockerfile 
dockerfile: syntax updates and s/xz/xz-utils
 2016-01-19 13:38:25 -05:00
Jimmy Zelinskie
ea193d3ae7 dockerfile: syntax updates and s/xz/xz-utils 
This fixes the automated build on Quay.io.
 2016-01-19 13:35:27 -05:00
Quentin Machu
e834301941 Merge pull request #49 from liangchenye/master 
Add DataDetector to support ACI and other layout format
 2016-01-07 10:44:40 -05:00
Quentin Machu
4dc9ea39dd Merge pull request #59 from davidxia/patch1 
Fix typo in doc
 2016-01-04 17:22:30 -05:00
David Xia
f2009513d5 Fix typo in doc 2016-01-04 13:14:12 -05:00
Quentin Machu
11475beb2c Merge pull request #52 from Quentin-M/custom_notifiers 
Custom notifiers
 2015-12-17 18:23:25 -05:00
Quentin Machu
f4a4d417e7 notifier: Rename HTTP to Webhook Notifier 2015-12-17 17:36:12 -05:00
Quentin Machu
2ea86c53f3 notifier: fix a bug that prevented graceful shutdown in certain cases 
- The notifier was never checking if it should shutdown if there were always at least one notification to send
- After a failure, the notifier is supposed to back-off, but when Clair is stopping, the backoff was interrupted immediately and did not retry. Instead it selected a new notification to send (most likely: the same one) and looped quickly/weirdly.
 2015-12-17 17:36:12 -05:00
Quentin Machu
480589a83a notifier: retry upon failure 2015-12-17 17:36:12 -05:00
Quentin Machu
3ff8bfaa93 notifier: Allow custom notifiers to be registered. 2015-12-16 16:08:35 -05:00
Quentin Machu
7ee1481e92 Merge pull request #53 from coreos/ubdater 
updater: Fix Ubuntu's partial update bug.
 2015-12-16 15:46:54 -05:00
Quentin Machu
c055c33cf8 updater: Fix Ubuntu's partial update bug. 
Deferring file closing causes `too many open files` (exceeding fs.file-max) on some platforms!
 2015-12-16 15:42:32 -05:00
Quentin Machu
510b901da6 Merge pull request #46 from coreos/fix_sql_tovalue 
database: Fix incorrect behavior of toValue when reading empty strings.
 2015-12-16 15:09:31 -05:00
Quentin Machu
8c1d3c9a86 *: Fix authentification typo 2015-12-16 12:01:51 -05:00
Liang Chenye
4b11491067 add ImageFormat to worker_test and programs under contrib 
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
 2015-12-15 21:01:22 -08:00
Liang Chenye
41509ccd3e add imageFormt to API.md; add xz to Dockerfile; fix bugs 
Signed-off-by: Liang Chenye <liangchenye@huawei.com>
 2015-12-15 20:29:53 -08:00
Quentin Machu
32747a5f25 database: Don't ignore empty results in toValue(s)() 
There is apparently no reason to ignore empty results - it was probably the case in the past (`null` value).

["", "v"] should be considered invalid by toValue() because it represents two values.
["", "v"] should be returned as it by toValues(), not trimming "".

Tests passes, it will hopefully not cause any issue in prod.
 2015-12-15 15:20:38 -05:00
Quentin Machu
172693b604 Merge pull request #47 from coreos/sn 
notifier: add ServerName configuration for TLS
 2015-12-15 14:31:59 -05:00
Jimmy Zelinskie
34870a2a2b move LoadTLSClientConfigForServer into API package 
This isn't reused any where just yet, so we're best off leaving it local
to the place that needs it.
 2015-12-15 12:09:46 -05:00
Jimmy Zelinskie
b3828c9c4c notifier: add ServerName configuration for TLS 2015-12-15 12:09:46 -05:00
liangchenye
8b649af666 detect bzip2/xz; add test data 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-15 16:08:27 +08:00
liangchenye
354c4b3672 always trim './' 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-15 11:34:22 +08:00
Quentin Machu
d3ebc3df33 Merge pull request #51 from coolljt0725/update_analyze_local_image_doc 
Update README.md of analyze_local_image
 2015-12-14 22:30:47 -05:00
Lei Jitang
5f876d20a6 Update README.md of analyze_local_image 
The latest Clair use config file for configuration, the command line to
run Clair instance is outdate in the README.md

Signed-off-by: Lei Jitang <leijitang@huawei.com>
 2015-12-14 22:35:38 -05:00
Quentin Machu
231e16a72f Merge pull request #50 from coolljt0725/fix_stop 
updater: fix type ctrl^C not stop updating
 2015-12-14 10:18:56 -05:00
Lei Jitang
cd1106dcdc fix type ctrl^C not stop updating 
when clair has network problem during updating vulnerability and failed
to update vulnerability, it will keep updating and even if type ctrl^C
can't stop the clair. This patch make clair to stop updating if type
ctrl^C.

Signed-off-by: Lei Jitang <leijitang@huawei.com>
 2015-12-14 00:48:01 -05:00
liangchenye
d402ae818e use imageFormat in params for consistence 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-11 19:41:32 +08:00
liangchenye
b1775ed3dc add data detector to support ACI and other format in the future 
Signed-off-by: liangchenye <liangchenye@huawei.com>
 2015-12-11 19:37:25 +08:00
Quentin Machu
9f0ed4dcfb Merge pull request #44 from Quentin-M/configfile 
main: Use configuration file instead of flags and simplify app extension
 2015-12-08 11:56:28 -05:00
Quentin Machu
eb7e5d5c74 main: Use configuration file instead of flags and simplify app extension. 
Clair will now use a YAML configuration file instead of command line
arguments as the number of parameters grows.

Also, Clair now exposes a Boot() func that allows everyone to easily
create their own project and load dynamically their own fetchers/updaters.
 2015-12-08 11:50:52 -05:00
Quentin Machu
ec0decfcaf docs: fix a typo in the model 
Fixes #43
 2015-12-07 18:23:18 -05:00
Quentin Machu
a4dcd3c13a Merge pull request #42 from Quentin-M/triple 
database: Update cayley and use Triple instead of Quad
 2015-12-06 22:27:45 -05:00
Quentin Machu
3fe3f3a4c7 database: Update cayley and use Triple instead of Quad 2015-12-06 20:15:40 -05:00
Quentin Machu
941a10cc2b Merge pull request #35 from mrqwer88/check_openvz_mirror_with_clair 
add tool for check openvz mirrors with clair to contrib
 2015-12-04 18:04:04 -05:00
Quentin Machu
d05a97a0a1 Merge pull request #29 from Quentin-M/notifier_tls 
notifier: Refactor and add client certificate authentification support.
 2015-12-04 16:59:47 -05:00
Quentin Machu
9946382223 api: Extracted client cert & HTTP JSON Render to utils. 2015-12-04 16:56:20 -05:00
Quentin Machu
20a126c84a notifier: Refactor and add client certificate authentification support. 
Fixes #23
 2015-12-04 16:53:54 -05:00
Quentin Machu
f106b64bc4 Merge pull request #22 from Quentin-M/predcst 
database: put missing predicates in consts and un-expose some of them
 2015-12-04 16:53:35 -05:00
Quentin Machu
9fc29e291c database: put missing predicates in consts and un-expose some of them 
Fixes #16
 2015-12-04 16:50:18 -05:00
Quentin Machu
1fefacfa63 Merge pull request #41 from coreos/travisfix 
travis: disable install step
 2015-12-04 16:33:55 -05:00
Jimmy Zelinskie
02d38843cb travis: disable install step 2015-12-04 16:24:03 -05:00