Vulnerability Static Analysis for Containers
Go to file
Brett Kochendorfer 6343119215
Update CONTRIBUTING.MD link
Looks like this was moved in 24ca12bdec
2017-12-17 11:04:45 -06:00
.github github: add issue template stable release notice 2017-10-27 14:10:44 -04:00
api database/pgsql: move token lib 2017-08-21 16:25:13 -04:00
cmd/clair Fix logging of error when connecting to database 2017-12-12 22:34:11 -05:00
contrib Adding back postgresURI and correcting comments 2017-09-12 23:29:21 +02:00
database database/pgsql: move token lib 2017-08-21 16:25:13 -04:00
Documentation Merge pull request #482 from yfoelling/patch-1 2017-12-13 16:21:22 -05:00
ext driver: Add proxy support 2017-11-07 12:17:13 +01:00
pkg Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
testdata/DistUpgrade clair: move worker to top level package 2017-01-26 18:24:04 -05:00
vendor vendor: updated vendor dir for grpc v2 api 2017-06-13 15:58:11 -04:00
.dockerignore Initial commit 2015-11-13 14:11:28 -05:00
.travis.yml api: v2 api with gRPC and gRPC-gateway 2017-06-13 15:58:10 -04:00
bill-of-materials.json *: regenerate bill of materials 2017-08-17 16:20:19 -04:00
config.yaml.sample Fix config.yaml.sample 2017-09-20 09:49:38 +02:00
DCO Initial commit 2015-11-13 14:11:28 -05:00
Dockerfile Use apk to install dumb-init instead of curl, modify entrypoint 2017-10-13 14:00:58 -04:00
glide.lock api: v2 api with gRPC and gRPC-gateway 2017-06-13 15:58:10 -04:00
glide.yaml api: v2 api with gRPC and gRPC-gateway 2017-06-13 15:58:10 -04:00
LICENSE Initial commit 2015-11-13 14:11:28 -05:00
NOTICE Initial commit 2015-11-13 14:11:28 -05:00
notifier.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
README.md Update CONTRIBUTING.MD link 2017-12-17 11:04:45 -06:00
ROADMAP.md ROADMAP: refresh with current priorities 2017-04-12 12:57:13 -04:00
updater_test.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
updater.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
worker_test.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
worker.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.