Chapter 5. Clair security scanner

Clair is a vulnerability scanner that analyzes container image layers and reports security issues from upstream CVE databases in Red Hat Quay. You can use these reports to identify vulnerabilities that affect image content.

Clair v4 (Clair) leverages static code analyses for parsing image content and reporting vulnerabilities affecting the content. Red Hat Quay includes Clair for both standalone and Operator deployments. You can run Clair in highly scalable configurations, where components can be scaled separately as appropriate for enterprise environments.