Clair

Open source

Open source static analyzer for vulnerabilities in container images.

Pricing: free
License: open-source
Open source: Yes

Editorial review

Clair has not yet been editorially reviewed. User reviews and published field data below are unaffected — we say so rather than implying an editorial verdict.

Facts & attributes

Every value carries its evidence state. “—” means unknown — never a silent default (P-02).

Identity · Taxonomy

Documentation(HTTPS URL): https://quay.github.io/clair/Verified
Tags(open-source;cloud-native): container security, vulnerability scanning, static analysis, OCI, Docker, KubernetesVerification pending

Pricing · Licensing

License model(proprietary;open-source;source-available;dual-license): open-sourceVerification pending
Pricing model(free;subscription;usage;seat;asset;transaction;revenue-share;perpetual;custom): freeVerified
Source repository(HTTPS URL): https://github.com/quay/clairVerified
SPDX license IDs(Apache-2.0;MIT): Apache-2.0Verified

Features · Product · Fit

Core capabilities(authoring;automation;analytics): Open source static analysis of vulnerabilities in application containers, Index container images via the Clair API, Match indexed images against known vulnerabilities, Supports OCI and Docker container imagesVerification pending

Api · Integrations · Ecosystem

API available(true/false): trueVerification pending

Audience · Use · Case

Best for(Neutral editorial summary): Teams wanting an open source container vulnerability scanner with an API for indexing OCI and Docker imagesVerification pending
Primary use cases(build;monitor;automate): Container image vulnerability scanning, Transparent security for container-based infrastructureVerification pending
Skill level(beginner;intermediate;advanced;specialist): advancedVerified

Lifecycle · Versioning

Current version(1.12.3): 4.9.0Verified
Maintenance status(active;maintenance;deprecated;EOL;archived): activeVerification pending

Vendor · Maintainer

Vendor type(commercial;foundation;community;government;consortium;individual): communityVerified

User reviews

Review policy

No published reviews yet.