Vulnerability Static Analysis for Containers
Clone or download
Latest commit 44ae4bc Sep 19, 2018
Permalink
Failed to load latest commit information.
.github github: add issue template stable release notice Oct 27, 2017
Documentation *: remove bzr dependency Jul 10, 2018
api Merge pull request #619 from KeyboardNerd/sidac/rm_layer Sep 13, 2018
cmd/clair pkg/pagination: init Sep 7, 2018
contrib Helm: change postgresql connection string format in configmap template Aug 13, 2018
database database: Use LayerWithContent as Layer Sep 13, 2018
ext Merge pull request #610 from MackJM/wip/master_nvd_httputil Sep 19, 2018
pkg pkg/grpcutil: init Sep 11, 2018
testdata/DistUpgrade clair: move worker to top level package Jan 26, 2017
vendor vendor: regenerate after removing graceful Sep 6, 2018
.dockerignore Adding httputil and version packages Sep 5, 2018
.travis.yml travis: fail if not gofmt -s Sep 5, 2018
DCO Initial commit Nov 13, 2015
Dockerfile Adding httputil and version packages Sep 5, 2018
LICENSE Initial commit Nov 13, 2015
NOTICE Initial commit Nov 13, 2015
README.md README: fixed issues address Mar 20, 2018
ROADMAP.md ROADMAP: refresh with current priorities Apr 12, 2017
bill-of-materials.json api: remove dependency on graceful Sep 6, 2018
code-of-conduct.md update CoC Jan 4, 2018
config.yaml.sample Fix config.yaml.sample Sep 20, 2017
glide.lock api: remove dependency on graceful Sep 6, 2018
glide.yaml api: remove dependency on graceful Sep 6, 2018
notifier.go database: changed Notification interface name Sep 11, 2018
updater.go Clair Logic, Extensions: updated mock tests, extensions, basic logic Aug 10, 2017
updater_test.go *: gofmt -s Sep 5, 2018
worker.go database: Use LayerWithContent as Layer Sep 13, 2018
worker_test.go database: Use LayerWithContent as Layer Sep 13, 2018

README.md

Clair

Build Status Docker Repository on Quay Go Report Card GoDoc IRC Channel

Note: The master branch may be in an unstable or even broken state during development. Please use releases instead of the master branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including appc and docker).

  1. In regular intervals, Clair ingests vulnerability metadata from a configured set of sources and stores it in the database.
  2. Clients use the Clair API to index their container images; this creates a list of features present in the image and stores them in the database.
  3. Clients use the Clair API to query the database for vulnerabilities of a particular image; correlating vulnerabilities and features is done for each request, avoiding the need to rescan images.
  4. When updates to vulnerability metadata occur, a notification can be sent to alert systems that a change has occured.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

Getting Started

Contact

  • IRC: #clair on freenode.org
  • Bugs: issues

Contributing

See CONTRIBUTING for details on submitting patches and the contribution workflow.

License

Clair is under the Apache 2.0 license. See the LICENSE file for details.