Hacker GitHub

← All repos

quay/clair

View on GitHub ↗ ★ 11,086 Go

Vulnerability Static Analysis for Containers

21 mentions on Hacker News by 18 people: 3 stories, 18 comments · first 2015-11-13 · latest 2024-01-28

Mentions per year 21 mentions · busiest year 2016 (5)
20082026
AllStoriesComments NewestTopOldest
  1. …metasploit at yourself, there are some nice scanners out there. Examples in no particular order: https://github.com/quay/clair https://github.com/anchore/grype/ https://github.com/eliasgranderubio/dagda/…
    comment by eyegor · 2024-01-28 · in I looked through attacks in my access logs
  2. …of optimizations for common traversals that are uncommon operations in relation databases. [0]: https://github.com/quay/clair [1]: https://github.com/authzed/spicedb
    comment by jzelinskie · 2023-03-31 · in Postgres as a graph database
  3. There is also Clair. https://github.com/quay/clair
    comment by loganmarchione · 2020-12-17 · in 51% of 4M Docker images have critical vulnerabilities
  4. …[1]: https://github.com/docker/distribution [2]: https://github.com/theupdateframework/notary [3]: https://github.com/coreos/clair
    comment by hardwaresofton · 2019-03-06 · in Kraken, an Open Source Peer-to-Peer Docker Registry
  5. These tools exist: https://github.com/coreos/clair https://help.github.com/articles/about-security-alerts-for-v...
    comment by majewsky · 2018-08-31 · in The pain that minimal version selection solves
  6. …have expanded to include container scanning. [0] https://www.blackducksoftware.com/products/hub [1] https://github.com/coreos/clair [2] https://github.com/vmware/harbor
    comment by jacques_chester · 2018-06-14 · in How the modern containerization trend is exploited by attackers
  7. After using https://github.com/coreos/clair to scan some official images, I was blown away by the amount of exploits in every one. Seems like the only path forward if security is a priority is to build the base layers from scratch...
    comment by tylfin · 2018-04-05 · in How did we end up with containers?
  8. Just like Clair ( https://github.com/coreos/clair ), only, for GitHub
    comment by qmachu · 2017-11-16 · in Security alerts on GitHub
  9. …know they were running vulnerable images and fix the issue before the hack occurred. [1] https://github.com/coreos/clair
    comment by SEJeff · 2017-09-18 · in Why we started CoreOS
  10. …are automated, its really easy and straight-forward to plug-in a variety of automated checks (e.g. https://github.com/coreos/clair , organizational policies, governance, etc)
    comment by rdsubhas · 2017-09-01 · in Rapid release at massive scale
  11. …tory/philips/host-info?tag=latest&tab=... [2] https://github.com/kubernetes/kubernetes/pull/42933 [3] https://github.com/coreos/clair [4] https://coreos.com/tectonic
    comment by philips · 2017-03-14 · in Docker Image Vulnerability Research
  12. …to improve the transparency of containers. [0]: http://git.alpinelinux.org/cgit/alpine-secdb/ [1]: https://github.com/coreos/clair
    comment by jzelinskie · 2016-12-27 · in Alpine Linux 3.5.0 released
  13. …would be a good foundation for vulnerability management system for containers in production: https://github.com/coreos/clair
    comment by bogomipz · 2016-06-24 · in Containers vs. Config Management
  14. …for docker images uses Cayley which is how I found about it, both neat projects and worth a look: https://github.com/coreos/clair
    comment by bogomipz · 2016-06-14 · in Cayley – An open-source graph database
  15. Have you heard of Claire? https://github.com/coreos/clair
    comment by colhom · 2016-04-08 · in Show HN: Athena, drop-in replacement for wkhtmltopdf using Docker, Electron and Go
  16. …of tags (downloadable containers) on Quay.io still contain Heartbleed, for crying out loud. [0]: https://github.com/coreos/clair
    comment by jzelinskie · 2015-12-05 · in The Oncoming Train of Enterprise Container Deployments
  17. You could use contrib/analyze-local-images - see discussion at https://github.com/coreos/clair/issues/5
    comment by spacenerf · 2015-11-23 · in CoreOS Introduces Clair: Open Source Vulnerability Analysis for Your Containers
  18. …supported operating system: Ubuntu CVE Tracker, Debian Security Bug Tracker, Red Hat Security Data https://github.com/coreos/clair/blob/master/README.md#detect...
    comment by robszumski · 2015-11-13 · in CoreOS Introduces Clair: Open Source Vulnerability Analysis for Your Containers