What is Clair?

Clair is an open-source project for the static analysis of vulnerabilities in application containers (like Docker). It provides a vulnerability API that can be integrated into container build and deployment workflows to identify potential security risks before they are deployed. It works by indexing the features of containers and matching them against known vulnerabilities from various sources. Common usage includes scanning container images during CI/CD pipelines to prevent the deployment of vulnerable images.