arno
/
clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Vulnerability Static Analysis for Containers
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
813 Commits
5 Branches
24 Tags
158 MiB
 
 
 
 
 
 
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '162e8cdafc'
${ noResults }
Go to file
Jimmy Zelinskie 162e8cdafc
config: enable suse updater 		5 years ago
.github .github: add stale and issue template enforcement 6 years ago
Documentation documentation: fix links to presentations 5 years ago
api Fix cert and key file mix up 5 years ago
cmd/clair Reintroduce image scanning for openSUSE and SLE 5 years ago
contrib HELM: also add option for nodeSelector 5 years ago
database database: add mapping for Ubuntu Cosmic (18.10) 6 years ago
ext Reintroduce image scanning for openSUSE and SLE 5 years ago
pkg Fix cert and key file mix up 5 years ago
testdata/DistUpgrade clair: move worker to top level package 7 years ago
vendor vendor: Update gopkg.in/yaml.v2 package 6 years ago
.dockerignore Adding httputil and version packages 6 years ago
.travis.yml Bump Go versions and use '.x' to always get latest patch versions 6 years ago
DCO Initial commit 9 years ago
Dockerfile Add build-base to docker image 6 years ago
LICENSE Initial commit 9 years ago
NOTICE Initial commit 9 years ago
README.md README: fixed issues address 6 years ago
ROADMAP.md *: update roadmap 6 years ago
bill-of-materials.json api: remove dependency on graceful 6 years ago
code-of-conduct.md update CoC 6 years ago
config.yaml.sample config: enable suse updater 5 years ago
glide.lock vendor: Update gopkg.in/yaml.v2 package 6 years ago
glide.yaml vendor: Update gopkg.in/yaml.v2 package 6 years ago
notifier.go database: changed Notification interface name 6 years ago
updater.go updater: Add vulnsrc affected feature type 6 years ago
updater_test.go updater: Add vulnsrc affected feature type 6 years ago
worker.go database: rename utility functions with commit/rollback 6 years ago
worker_test.go database: move dbutil and testutil to database from pkg 6 years ago

README.md

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

  • IRC: #clair on freenode.org
  • Bugs: issues

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.