October 2018
Beginner
470 pages
11h 57m
English
One such open source project that has emerged in this space is clair. clair is an open source project for the static analysis of vulnerabilities in appc (https://github.com/appc/spec) and Docker (https://github.com/moby/moby/blob/master/image/spec/v1.md) containers.
clair scans your code against Common Vulnerabilities and Exploits (CVEs). It can be integrated into your CI/CD pipeline and run as a response to new builds. If vulnerabilities are found, they can be taken as feedback into the pipeline, even stop deployment, and fail the build. This forces developers to be aware of and remediate vulnerabilities during their normal release ...
Read now
Unlock full access