Dockerized https://github.com/arminc/clair-scanner
- Shell 61.8%
- Dockerfile 38.2%
| .gitlab-ci.yml | ||
| config.yaml | ||
| Dockerfile | ||
| entrypoint.sh | ||
| examples-whitelist.yml | ||
| README.md | ||
| scan.sh | ||
arminc-clair-scanner
Run clair in your Gitlab CI Pipeline
clair:
stage: test
image: thomass/clair
services:
- name: arminc/clair-db:latest
alias: postgres
variables:
CLAIR_THRESHOLD: 'Medium'
CLAIR_WHITELIST_PATH: 'clair-whitelist.yml'
script: scan "my/imagename:1.2.3"
- Both environment variables are optional
- CLAIR_THRESHOLD: default is 'Unknown'; could be 'Defcon1', 'Critical', 'High', 'Medium', 'Low', 'Negligible', 'Unknown'
- CLAIR_WHITELIST is the path to the whitelist file in your repository, if existing. See examples-whitelist.yml
Credits
This scanner is created of https://github.com/arminc/clair-scanner and self containing the clair server. You just need to 'add' the arminc/clair-db from https://github.com/arminc/clair-local-scan