Clair

Build a container image

Push the image to a container registry

Trigger Clair to scan the image via API

Receive vulnerability report from Clair

Fail the build if critical vulnerabilities are found

Configure Clair with relevant compliance policies

Scan container images using Clair

Generate compliance reports

Identify non-compliant images

Remediate vulnerabilities to achieve compliance

Deploy Clair in a monitoring mode

Clair continuously scans running containers

Alerts are generated when new vulnerabilities are found

Security teams investigate and remediate vulnerabilities

Scan third-party container images using Clair

Identify vulnerabilities in dependencies

Evaluate the risk of using vulnerable components

Update or replace vulnerable dependencies

Continuously monitor for new vulnerabilities

Use Clair to scan all container images

Identify vulnerable containers

Isolate and remediate affected containers

Analyze the root cause of the incident

Implement preventative measures