Comments (5)
Klar was designed to work only with remote repository, for local images you may want to use https://github.com/coreos/clair/tree/master/contrib/analyze-local-images
from klar.
@hashmap The link you provided above is giving me a 404 error. Can you elaborate why local images won't work? Or in other words, why does Klar requires a remote docker registry credential in order for it to work?
from klar.
According to clair/Documentation/integrations.md, analyze-local-images is a deprecated tool to analyze local Docker images.
The link you provided above is giving me a 404 error.
Docker registry credential is only needed with your security Docker registry.
Or in other words, why does Klar requires a remote docker registry credential in order for it to work?
from klar.
The link was posted a year ago. It was moved to https://github.com/coreos/analyze-local-images
The beginning of Klar's readme file says Klar. Integration of Clair and Docker Registry
, so analyse of local images is just out of scope. We built the tool with a narrow use case in mind. Potentially it could be extended to analyze local images, the main value would be check before pushing to the registry. However it would require some serious coding effort, klar needs to emulate docker registry.
from klar.
@supereagle @hashmap thanks and fair enough.
from klar.
Related Issues (20)
- Allow for comments in whitelist file HOT 1
- bug: Basic Auth Header should be Case-Insensitive => Nexus 3 Registry does not work with klar HOT 1
- Do you consider add builded image to hub.docker.com? HOT 1
- Can't pull image: Token request returned 400
- Unable to install klar from the source code using the go get command.
- Change whitelist and blacklist terms HOT 6
- Can't pull fsLayers "authentication required" HOT 2
- go get fails HOT 10
- [Help Needed]How to fetch layer information from klar reponse.
- Repo seems abandoned, is it? HOT 2
- Is Klar getting a release to support clair 4.0.4?
- Klar not able to connect to clair server
- support oci images
- Klar giving empty json o/p intermittently
- Feature: Show all vulnerabilities regardless of CLAIR_OUTPUT value with only selected level and higher are count towards the CLAIR_THRESHOLD
- Klar can not be connectred with clair deployed on openshift
- Klar(2.4.0) does not white list specific images HOT 1
- Feature: Klar check whitelisted CVEs and notify on CVE changed Vector (Score)
- Feature: Klar should be able to scan OCI images
- [BUG] Klar always scans amd64 architecture image although DOCKER_PLATFORM_ARCH=arm64 for multi architecture images
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from klar.