reddit hackernews mail facebook facebook linkedin
clair

clair

Vulnerability static analysis for containers.
#containers   #docker   #kubernetes  
https://quay.github.io/clair/
https://github.com/quay/clair

Clair is an application for parsing image contents and reporting vulnerabilities affecting the contents. This is done via static analysis and not at runtime.

Clair supports the extraction of contents and assignment of vulnerabilities from the following official base containers:
- Ubuntu
- Debian
- RHEL
- Suse
- Oracle
- Alpine
- AWS Linux
- VMWare Photon
- Python

The above list defines Clair's current support matrix.

Clair v4 utilizes the ClairCore library as its engine for examining contents and reporting vulnerabilities. At a high level you can consider Clair a service wrapper to the functionality provided in the ClairCore library.