1
0
Fork 0
Vulnerability Static Analysis for Containers
Du kannst nicht mehr als 25 Themen auswählen Themen müssen entweder mit einem Buchstaben oder einer Ziffer beginnen. Sie können Bindestriche („-“) enthalten und bis zu 35 Zeichen lang sein.
 
 
 
 
 
 
Datei suchen
Andy 0085d3e042
continuous-integration/drone/push Build is passing Details
update readme
vor 5 Jahren
.github .github: add stale and issue template enforcement vor 6 Jahren
Documentation Add Amazon Linux to drivers and data sources doc vor 5 Jahren
api Merge pull request #741 from KeyboardNerd/parallel_download vor 5 Jahren
cmd/clair Add updaters for Amazon Linux 2018.03 and Amazon Linux 2 vor 5 Jahren
contrib helm: allow for ingress path configuration in values.yml vor 5 Jahren
database add disco to namespace mappings for ubuntu vor 5 Jahren
ext database: Rename affected type to feature type (for Amazon Linux updater) vor 5 Jahren
pkg tarutil: convert all filename specs to regexps vor 5 Jahren
testdata/DistUpgrade clair: move worker to top level package vor 7 Jahren
vendor glide: add errgroup and regenerate vendor vor 5 Jahren
.dockerignore Adding httputil and version packages vor 6 Jahren
.drone.yml add Drone CI vor 5 Jahren
.travis.yml Travis: Drop support for postgres 9.4 vor 5 Jahren
DCO Initial commit vor 8 Jahren
Dockerfile Add build-base to docker image vor 6 Jahren
LICENSE Initial commit vor 8 Jahren
NOTICE Initial commit vor 8 Jahren
README.md update readme vor 5 Jahren
ROADMAP.md *: update roadmap vor 6 Jahren
analyzer.go clair: Use builder pattern for constructing ancestry vor 5 Jahren
ancestry.go Use PotentialNamespace in ancestry vor 5 Jahren
ancestry_test.go Use PotentialNamespace in ancestry vor 5 Jahren
bill-of-materials.json api: remove dependency on graceful vor 6 Jahren
blob.go clair: Use builder pattern for constructing ancestry vor 5 Jahren
code-of-conduct.md update CoC vor 6 Jahren
config.yaml.sample config: enable suse updater vor 5 Jahren
glide.lock glide: add errgroup and regenerate vendor vor 5 Jahren
glide.yaml glide: add errgroup and regenerate vendor vor 5 Jahren
license_header_test.go Add license header check test vor 5 Jahren
notifier.go database: Move db logic to dbutil vor 5 Jahren
updater.go database: Move db logic to dbutil vor 5 Jahren
updater_test.go Merge pull request #672 from KeyboardNerd/source_package/feature_type vor 5 Jahren

README.md

Build Status

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

  • IRC: #clair on freenode.org
  • Bugs: issues

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.