Vulnerability Static Analysis for Containers

Iet uz failu

Andy 0085d3e042 continuous-integration/drone/push Build is passing Papildu informācija update readme		pirms 5 gadiem
.github	.github: add stale and issue template enforcement	pirms 6 gadiem
Documentation	Add Amazon Linux to drivers and data sources doc	pirms 5 gadiem
api	Merge pull request #741 from KeyboardNerd/parallel_download	pirms 5 gadiem
cmd/clair	Add updaters for Amazon Linux 2018.03 and Amazon Linux 2	pirms 5 gadiem
contrib	helm: allow for ingress path configuration in values.yml	pirms 5 gadiem
database	add disco to namespace mappings for ubuntu	pirms 5 gadiem
ext	database: Rename affected type to feature type (for Amazon Linux updater)	pirms 5 gadiem
pkg	tarutil: convert all filename specs to regexps	pirms 5 gadiem
testdata/DistUpgrade	clair: move worker to top level package	pirms 7 gadiem
vendor	glide: add errgroup and regenerate vendor	pirms 5 gadiem
.dockerignore	Adding httputil and version packages	pirms 6 gadiem
.drone.yml	add Drone CI	pirms 5 gadiem
.travis.yml	Travis: Drop support for postgres 9.4	pirms 5 gadiem
DCO	Initial commit	pirms 9 gadiem
Dockerfile	Add build-base to docker image	pirms 6 gadiem
LICENSE	Initial commit	pirms 9 gadiem
NOTICE	Initial commit	pirms 9 gadiem
README.md	update readme	pirms 5 gadiem
ROADMAP.md	*: update roadmap	pirms 6 gadiem
analyzer.go	clair: Use builder pattern for constructing ancestry	pirms 5 gadiem
ancestry.go	Use PotentialNamespace in ancestry	pirms 5 gadiem
ancestry_test.go	Use PotentialNamespace in ancestry	pirms 5 gadiem
bill-of-materials.json	api: remove dependency on graceful	pirms 6 gadiem
blob.go	clair: Use builder pattern for constructing ancestry	pirms 5 gadiem
code-of-conduct.md	update CoC	pirms 6 gadiem
config.yaml.sample	config: enable suse updater	pirms 5 gadiem
glide.lock	glide: add errgroup and regenerate vendor	pirms 5 gadiem
glide.yaml	glide: add errgroup and regenerate vendor	pirms 5 gadiem
license_header_test.go	Add license header check test	pirms 5 gadiem
notifier.go	database: Move db logic to dbutil	pirms 5 gadiem
updater.go	database: Move db logic to dbutil	pirms 5 gadiem
updater_test.go	Merge pull request #672 from KeyboardNerd/source_package/feature_type	pirms 5 gadiem

README.md

Clair

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Learn the terminology and about the drivers and data sources that power Clair
Watch presentations on the high-level goals and design of Clair
Follow instructions to get Clair up and running
Explore the API on SwaggerHub
Discover third party integrations that help integrate Clair with your infrastructure
Read the rest of the documentation on the CoreOS website or in the Documentation directory

Contact

IRC: #clair on freenode.org
Bugs: issues

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.