discover · compare · collections · requirements · contribute · feed · watching · stats · help with your tokens
quay/clair · source
Snapshot 0 · 2026-11-04T12:47:24Z · Go · Apache-2.0
Content fingerprint
3dfd110c7a5fed067fcc5df67296b9b1bedf0fcf4a9df44b22bb9994ed8918c6GitHub description at capture
Vulnerability Static Analysis for Containers
README at capture
# Clair [](https://quay.io/repository/projectquay/clair) [](https://pkg.go.dev/github.com/quay/clair/v4) [](http://webchat.freenode.net/?channels=clair) **Note**: The `main` branch may be in an *unstable or even broken state* during development. Please use [releases] instead of the `main` branch in order to get stable binaries.  Clair is an open source project for the [static analysis] of vulnerabilities in application containers (currently including [OCI] and [docker]). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named `Clair` after the French term which translates to *clear*, *bright*, *transparent*. [The book] contains all the documentation on Clair's architecture and operation. [OCI]: https://github.com/opencontainers/image-spec/blob/master/spec.md [docker]: https://github.com/docker/docker/blob/master/image/spec/v1.2.md [releases]: https://github.com/quay/clair/releases [static analysis]: https://en.wikipedia.org/wiki/Static_program_analysis [The book]: https://quay.github.io/clair/ ## Community - Mailing List: [clair-dev@googlegroups.com](https://groups.google.com/forum/#!forum/clair-dev) - IRC: #[clair](irc://irc.freenode.org:6667/#clair) on freenode.org - Bugs: [issues](https://github.com/quay/clair/issues) ## Contributing See [CONTRIBUTING](.github/CONTRIBUTING.md) for details on submitting patches and the contribution workflow. ## License Clair is under the Apache 2.0 license. See the [LICENSE](LICENSE) file for details.