Clair is an open-source project for the static analysis of vulnerabilities in application containers (like Docker). It provides a vulnerability API that can be integrated into container build and deployment workflows to identify potential security risks before they are deployed. It works by indexing the features of containers and matching them against known vulnerabilities from various sources. Common usage includes scanning container images during CI/CD pipelines to prevent the deployment of vulnerable images.
This tech insight summary was produced by Sumble. We provide rich account intelligence data.
On our web app, we make a lot of our data available for browsing at no cost.
We have two paid products, Sumble Signals and Sumble Enrich, that integrate with your internal sales systems.