Audience

Developers looking for an advanced Static Code Analysis solution

About Clair

Clair is an open-source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker). Clients use the Clair API to index their container images and can then match it against known vulnerabilities. Our goal is to enable a more transparent view of the security of the container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, and transparent. Manifests are Clair's representation of a container image. Clair leverages the fact that OCI Manifests and Layers are content-addressed to reduce duplicated work.

Integrations

API:
Yes, Clair offers API access

Ratings/Reviews

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Company Information

Clair
github.com/quay/clair

Videos and Screen Captures

Clair Screenshot 1
Other Useful Business Software
MongoDB Atlas runs apps anywhere Icon
MongoDB Atlas runs apps anywhere

Deploy in 115+ regions with the modern database for every enterprise.

MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Start Free

Product Details

Platforms Supported
Cloud
Linux
Training
Documentation
Support
Online

Clair Frequently Asked Questions

Q: What kinds of users and organization types does Clair work with?
Q: What languages does Clair support in their product?
Q: What other applications or services does Clair integrate with?
Q: Does Clair have an API?
Q: What type of training does Clair provide?

Clair Product Features

Container Security

Container Stack Scanning
View Container Metadata
Image Vulnerability Detection
Application Performance Tracking
Centralized Policy Management
Access Roles / Permissions
Testing
Reporting

Static Code Analysis

Multiple Programming Language Support
Standard Security/Industry Libraries
Code Standardization / Validation
Analytics / Reporting
Provides Recommendations
Vulnerability Management