Push Scans to Clair

[orlando-jamie]

trafficstars

Hello, I am trying to create a process to use clair-scanner to analyze my images. Is there any option to just push the container layers to clair to scan (like klar does), rather than starting a server for clair to pull from? I am interested in leveraging existing integrations that use the claire-scanner output json, but managing the clair <--> clair-scanner network topology might not be achievable for my use case.

Thank You, -Jamie

[travisghansen]

Not sure if it's viable in your use case but I had similar thoughts. Ultimately I found a fully containerized solution in the following which may be helpful for you:

docker run -d --name db arminc/clair-db:latest
docker run -d --link db:postgres --name clair arminc/clair-local-scan:v2.0.6
docker run --rm  -v /var/run/docker.sock:/var/run/docker.sock --network=container:clair ovotech/clair-scanner clair-scanner alpine