{"repo":"quay/clair","free":true,"listed":false,"github":"https://github.com/quay/clair","clone":"git clone https://github.com/quay/clair.git","description":"Vulnerability Static Analysis for Containers","language":"Go","stars":11049,"topics":["containers","static-analysis","go","kubernetes","docker","oci","oci-image","vulnerabilities","clair"],"license":"Apache-2.0","category":"deployment-docker-iac","readme_excerpt":"Clair Note : The main branch may be in an unstable or even broken state during development. Please use [releases] instead of the main branch in order to get stable binaries. Clair is an open source project for the [static analysis] of vulnerabilities in application containers (currently including [OCI] and [docker]). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear , bright , transparent . [The book] contains all the documentation on Clair's architecture and operation. [OCI]: https://github.com/opencontainers/image-spec/blob/master/spec.md [docker]: https://github.com/docker/docker/blob/master/image/spec/v1.2.md [releases]: https://github.com/quay/clair/releases [static analysis]: https://en.wikipedia.org/wiki/Static program analysis [The book]: https://quay.github.io/clair/ Community - Mailing List: clair-dev@googlegroups.com - IRC: #clair on freenode.org - Bugs: issues Contributing See CONTRIBUTING for details on submitting patches and the contribution workflow. License Clair is under the Apache 2.0 license. See the LICENSE file for details.","default_branch":null,"files":null,"tree":[],"storefront":"/r/quay","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/quay/clair/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}