Clair allows us to perform static vulnerability analysis against containers by checking with the existing vulnerability database. It allows us to perform vulnerability analysis checks against our Docker container images using the Clair database. More details about Clair can be found at https://github.com/coreos/clair.
Setting up Clair itself is really difficult and scanning using the API with Docker images makes more difficult. Here comes clair-scanner, it makes really simple to set up and perform scans using the REST API.
Read more about clair-scanner at https://github.com/arminc/clair-scanner.
Clair-scanner can trigger a simple scan against a container based on certain events, to check for existing vulnerabilities. Furthermore, this ...
