arno/clair
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
Vulnerability Static Analysis for Containers
738 Commits 5 Branches 24 Tags 158 MiB
Go 96.7%
Protocol Buffer 1.2%
TSQL 1%
Smarty 0.6%
Shell 0.3%
Other 0.2%
9f5d1ea4e1
Go to file
Sida Chen 9f5d1ea4e1 v3: associate feature and namespace with detector
2018-10-01 11:04:08 -04:00
.github github: add issue template stable release notice 2017-10-27 14:10:44 -04:00
api v3: associate feature and namespace with detector 2018-10-01 11:04:08 -04:00
cmd/clair config: removed worker config 2018-09-19 14:33:08 -04:00
contrib Helm: change postgresql connection string format in configmap template 2018-08-13 15:24:33 +02:00
database pgsql: update the query format 2018-09-19 14:33:08 -04:00
Documentation *: remove bzr dependency 2018-07-10 16:46:46 -04:00
ext vulnsrc_rhel: cve impact 2018-09-15 00:00:09 +02:00
pkg pkg/grpcutil: init 2018-09-11 14:46:52 -04:00
testdata/DistUpgrade clair: move worker to top level package 2017-01-26 18:24:04 -05:00
vendor vendor: regenerate after removing graceful 2018-09-06 16:56:33 -04:00
.dockerignore Adding httputil and version packages 2018-09-05 14:56:39 -04:00
.travis.yml travis: fail if not gofmt -s 2018-09-05 18:57:10 -04:00
bill-of-materials.json api: remove dependency on graceful 2018-09-06 16:56:33 -04:00
code-of-conduct.md update CoC 2018-01-04 12:29:49 -08:00
config.yaml.sample config: removed worker config 2018-09-19 14:33:08 -04:00
DCO Initial commit 2015-11-13 14:11:28 -05:00
Dockerfile Adding httputil and version packages 2018-09-05 14:56:39 -04:00
glide.lock api: remove dependency on graceful 2018-09-06 16:56:33 -04:00
glide.yaml api: remove dependency on graceful 2018-09-06 16:56:33 -04:00
LICENSE Initial commit 2015-11-13 14:11:28 -05:00
NOTICE Initial commit 2015-11-13 14:11:28 -05:00
notifier.go database: changed Notification interface name 2018-09-11 14:24:09 -04:00
README.md README: fixed issues address 2018-03-19 21:21:38 -07:00
ROADMAP.md ROADMAP: refresh with current priorities 2017-04-12 12:57:13 -04:00
updater_test.go *: gofmt -s 2018-09-05 19:20:35 -04:00
updater.go Clair Logic, Extensions: updated mock tests, extensions, basic logic 2017-08-10 11:24:40 -04:00
worker_test.go database: Use LayerWithContent as Layer 2018-09-13 13:21:39 -04:00
worker.go config: removed worker config 2018-09-19 14:33:08 -04:00

README.md

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.