Clair

Features

Container Security Scanners - Identifies vulnerabilities in container images by matching indexed contents against known security databases.
Container Security - Provides comprehensive security analysis and vulnerability scanning for container images.
Content-Addressable Storage - Implements content-addressable storage to index container layers by cryptographic hashes and avoid redundant analysis.
Intermediate Representations - Transforms raw package data into a standardized intermediate representation to correlate source-level packages with binary versions.
Metadata Synchronizers - Periodically synchronizes security metadata from remote vulnerability databases to maintain a local searchable registry.
Static Analysis - Matches image package manifests against vulnerability databases using static analysis without executing the container.
Indexing Services - Processes container image layers into intermediate representations to enable fast security lookups.
Image Indexing Tools - Processes image manifests into intermediate representations to enable fast security lookups and duplicate detection.
Image Layer Analyzers - Parses and decomposes container image manifests to isolate and analyze individual filesystem layers.
Vulnerability Syncing - Fetches and synchronizes security data from multiple external vulnerability databases.
Vulnerability Database Management - Synchronizes and maintains local registries of security metadata from multiple external vulnerability sources.
Image Vulnerability Assessments - Analyzes container images to correlate contents with known security vulnerabilities based on risk levels.
Vulnerability Scanning - Scans container images across various package formats by comparing contents against multi-platform vulnerability databases.
Continuous Security Monitoring - Tracks previously analyzed images and alerts users when new vulnerabilities are discovered.
Container Registry Integrations - Integrates with container registries to automate security scanning and generate alerts.
Scan Version Tracking - Uses unique identifiers in responses to allow clients to detect when an image requires a new scan.
Messaging Notifications - Delivers vulnerability alerts via messaging protocols based on defined polling and delivery intervals.
Package Version Mapping - Tracks the relationship between source-level packages and binary versions to improve vulnerability attribution accuracy.
Vulnerability Alerts - Monitors updated security data and notifies users when new threats affect previously analyzed manifests.
Security Report Generation - Generates detailed documents listing security findings and vulnerabilities discovered within container images.
Cloud Native Infrastructure - Service for scanning and analyzing container image vulnerabilities.
Container Security - Vulnerability scanner for container images.
Infrastructure as Code Analysis - Scans container images for known vulnerabilities.
Container Management - Static analysis tool for identifying vulnerabilities in container images.
Image Scanning and SBOM - Static analysis of vulnerabilities in container images.

Open-source alternatives to Clair

Similar open-source projects, ranked by how many features they share with Clair.

anchore/grype
anchore/grype
12,423View on GitHub
Grype is a command-line security scanner designed to identify known vulnerabilities within container images, filesystems, and software manifests. It functions as a software composition analysis tool that detects security flaws in application components and open-source libraries to support supply chain security. The tool distinguishes itself by reconstructing the final state of container images through layered filesystem inspection and normalizing diverse package formats into a unified dependency graph. It maintains a local cache of security advisories synchronized from multiple upstream sourc
Gocontainer-imagecontainerscyclonedx
View on GitHub12,423
coreos/clair
coreos/clair
11,011View on GitHub
Clair is a container vulnerability scanner that performs static analysis of container images to identify known security vulnerabilities. It functions as an analyzer for OCI and Docker images, indexing their contents to detect security risks and outdated packages without requiring the containers to be running. The tool identifies vulnerabilities by matching indexed container components against security databases to find common vulnerabilities and exposures. This process involves analyzing filesystem layers to track the provenance and versioning of packages across the image hierarchy. The proj
Go
View on GitHub11,011
goharbor/harbor
goharbor/harbor
28,761View on GitHub
Harbor is a self-hosted, enterprise-grade container registry platform designed to store, sign, and scan container images and cloud-native artifacts. It provides a centralized repository that integrates directly with Kubernetes environments to manage the full lifecycle of software artifacts, from initial storage to production deployment. The platform distinguishes itself through a focus on security, governance, and multi-site availability. It features a pluggable vulnerability scanning framework that allows for the integration of various security engines, alongside content trust mechanisms tha
Gocloud-nativecncfcncf-project
View on GitHub28,761
vectordotdev/vector
vectordotdev/vector
22,071View on GitHub
Vector is a high-performance observability data pipeline designed to collect, transform, and route logs, metrics, and traces across distributed infrastructure. It functions as a modular engine that decouples data ingestion from processing and transmission, utilizing a component-based architecture to connect diverse sources to multiple destinations. The project distinguishes itself through a focus on reliability and flow control. It implements backpressure-aware data movement to prevent data loss during traffic spikes and utilizes disk-backed event buffering to ensure durability during network
Rusteventsforwarderhacktoberfest
View on GitHub22,071

See all 30 alternatives to Clair

quayclair

Features

Open-source alternatives to Clair

anchore/grype

coreos/clair

goharbor/harbor

vectordotdev/vector

Star history

Open-source alternatives to Clair

anchore/grype

coreos/clair

goharbor/harbor

vectordotdev/vector