Vulnerability Static Analysis for Containers
Go to file
Ales Raszka d77dc0f0ae Use struct as a map key instead of string
String was used when Feature contains PotentialNamespace. Since it was
moved to LayerFeature we can use struct as map key instead of string.
2019-03-08 09:51:40 +01:00
.github
api Merge pull request #724 from KeyboardNerd/ref 2019-03-06 15:25:04 -05:00
cmd/clair
contrib
database Use struct as a map key instead of string 2019-03-08 09:51:40 +01:00
Documentation
ext Add test for potential namespace 2019-03-08 09:51:19 +01:00
pkg Add missing licenses 2019-03-05 11:42:59 -05:00
testdata/DistUpgrade
vendor
.dockerignore
.travis.yml
analyzer.go
ancestry_test.go clair: Fix namespace update logic 2019-02-27 17:02:36 -05:00
ancestry.go clair: Fix namespace update logic 2019-02-27 17:02:36 -05:00
bill-of-materials.json
blob.go
code-of-conduct.md
config.yaml.sample
DCO
Dockerfile
glide.lock
glide.yaml
LICENSE
license_header_test.go Add license header check test 2019-03-05 11:42:54 -05:00
NOTICE
notifier.go database: Move db logic to dbutil 2019-03-06 15:22:21 -05:00
README.md
ROADMAP.md
updater_test.go
updater.go database: Move db logic to dbutil 2019-03-06 15:22:21 -05:00

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.