What is Clair?
Clair is a container vulnerability analysis service by CoreOS. It provides the list of vulnerabilities that threaten each container and can sends notifications whenever new vulnerabilities that affect existing containers are released.
Clair is a tool in the Container Tools category of a tech stack.
Clair is an open source tool with GitHub stars and GitHub forks. Here’s a link to Clair's open source repository on GitHub
Who uses Clair?
Companies
7 companies reportedly use Clair in their tech stacks, including immowelt GmbH, DevOPS and Infrastructure, and DevSecOps.
Developers
30 developers on StackShare have stated that they use Clair.
Clair Integrations
Clair's Features
- Api defines how users interact with Clair and exposes a documented HTTP API
- Worker extracts useful informations from layers and store everything in the database
- Updater periodically updates Clair's vulnerability database from known vulnerability sources
- Notifier dispatches notifications about vulnerable containers when vulnerabilities are released or updated
- Database persists layers informations and vulnerabilities in Cayley graph database
- Health summarizes health checks of every Clair's services
Clair Alternatives & Comparisons
What are some alternatives to Clair?
Iris
The fastest web framework for Go.
Kubernetes
Kubernetes is an open source orchestration system for Docker containers. It handles scheduling onto nodes in a compute cluster and actively manages workloads to ensure that their state matches the users declared intentions.
Docker Compose
With Compose, you define a multi-container application in a single file, then spin your application up in a single command which does everything that needs to be done to get it running.
Rancher
Rancher is an open source container management platform that includes full distributions of Kubernetes, Apache Mesos and Docker Swarm, and makes it simple to operate container clusters on any cloud or infrastructure platform.
Docker Swarm
Swarm serves the standard Docker API, so any tool which already communicates with a Docker daemon can use Swarm to transparently scale to multiple hosts: Dokku, Compose, Krane, Deis, DockerUI, Shipyard, Drone, Jenkins... and, of course, the Docker client itself.
