clair
clair copied to clipboard
Vulnerability Static Analysis for Containers
Signed-off-by: Hank Donnay
Hi When I push Google Distroless Images to my Quay registry, I've got Unsupported security scan results. (just tried with mcr.microsoft.com/azure-cognitive-services/vision/read:3.2-model-2022-04-30 ) Expected Outcome Security findings based on CVE for...
### Description of Problem / Feature Request Trying to debug problems using the logs is hard as there is no way to connect logs to specific requests. It would be...
### Description of Problem / Feature Request Clair does not pass any ecosystem configuration to LibIndex: https://github.com/quay/clair/blob/main/initialize/services.go#L117 https://github.com/quay/clair/blob/main/initialize/services.go#L172 Consequently LibIndex will use its default set of ecosystems: https://github.com/quay/claircore/blob/main/libindex/opts.go#L77 As you...
My Clair DB is slowly filling up with index reports for old deleted images. I would like to clean those up, but I cannot find anything in the docs regarding...
It doesn't seem like Clair 4.2.0 is scanning RPMs . I scanned some of my images that were several months old and richxsl/rhel7 from docker.io and only received some pypi...
### Description of Problem The famous cloud-native software "Clair" does not have official Helm Chart. ### Expected Outcome We expect one of two things: - either, the "quay" github organization...
this allows requests to be traced through the logs Fixes #1547
This _seemed_ simple enough, haven't check if there are other places where we want to accept other inputs. Still need to update the openapi reference.
This updates the Dockerfile to use the "-trimpath" flag to facilitate more repeatable builds, with an eye to supporting plugin loading. Another "builder" Dockerfile is added to use as a...