Friday, September 17, 2021

I tried Clair v4.2.2 locally.

I launched Clair v4.2.2 on Vagrant in Windows 10 and checked vulnerabilities for a docker image.


Minimum required specifications:

  • Memory: 8GB or more
  • Disk Size: 31GB or more


After started Clair v4, wait at least 15 minutes.

Push a docker image and it'll be queued.

Then vulnerabilities are checked.


=> No vulnerabilities.


I also checked vulnerabilities using the clairctl v4.2.2 command.

=> No vulnerabilities.


If you feel doubts about the result of Amazon ECR image scanning, this will be one option to confirm.


[FYI] If you have an account on Red Hat Quay.io, you can check vulnerabilities for any docker images in your public repository for free.

No comments:

Post a Comment