Giter VIP home page Giter VIP logo

clair-client's Introduction

clair-client

Command line client for quay/clair v4

Installation

Usage

$> clair-client -docker-registry https://docker.mysite.com -image myorg/myimage:latest -docker-username myusername -docker-password mypassword -clair-url https://clair.mysite.com  -whitelist ./config/whitelist
Usage of clair-client:
  -clair-index-timeout int
        Index timeout for clair (default 120s)
  -clair-password string
        Clair password
  -clair-url string
        Clair URL
  -clair-username string
        Clair username
  -docker-password string
        Docker registry password
  -docker-registry string
        Docker Registry
  -docker-username string
        Docker registry username
  -image string
        Url of docker image
  -max-severity string
        Maximum severity regarded as ok (default "Medium")
  -quiet
        Be quiet
  -v    
        Print the version info and exit
  -whitelist string
        Name of whitelist file for CVEs

Output:

Logging into docker registry https://docker.mysite.com ...
Loading docker manifest for image myorg/myimage:latest from registry ...
Indexing docker manifest in clair ...
Waiting for indexing of docker manifest in clair to finish ...
Generating vulnerability report ...
Processing vulnerability report ...

+--------------------------------+----------+--------------------------------+---------+-----------+-------------+
| VULNERABILITY                  | SEVERITY | COMPONENT                      | VERSION | FIXEDIN   | WHITELISTED |
+--------------------------------+----------+--------------------------------+---------+-----------+-------------+
| CVE-2021-22890                 | Unknown  | Alpine Linux v3.12 > curl      |         | 7.76.0-r0 | false       |
| pyup.io-39252                  | Unknown  | cryptography                   | <3.3    |           | false       |
| pyup.io-39606 (CVE-2020-36242) | Unknown  | cryptography                   | <3.3.2  |           | false       |
| pyup.io-38932 (CVE-2020-25659) | Unknown  | cryptography                   | <=3.2   |           | false       |
| CVE-2021-30139                 | Unknown  | Alpine Linux v3.12 > apk-tools |         | 2.10.6-r0 | true        |
| CVE-2020-8284                  | Unknown  | Alpine Linux v3.12 > curl      |         | 7.74.0-r0 | false       |
| CVE-2021-22876                 | Unknown  | Alpine Linux v3.12 > curl      |         | 7.76.0-r0 | false       |
+--------------------------------+----------+--------------------------------+---------+-----------+-------------+

Found 0 vulnerabilities with severity 'Medium' or more (0 whitelisted)

Exits with code 1 when non-whitelisted vulnerabilities with an severity above max-severity were found.

Whitelist file

Example:

# This is a comment
CVE-2021-30139
CVE-2020-8284

Tested Clair-Servers

Version Status
v4.0.5 OK
v4.1.0 OK

Development

Snapshot build

$> make --always-make

Release build

$> BUILD_VERSION=1.0.0 make --always-make

clair-client's People

Contributors

indece-official avatar

Stargazers

 avatar

Watchers

 avatar

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.