Deployment-ready docker configuration and instructions to use Quay Clair on your infrastructure and CIs

Run the following command, then wait about 5 minutes the time Clair indexes all CVEs.

docker-compose up -d

Use the utility container I've provided to easily scan an image, including one from a private registry.

1. Check the env variables of scan.docker-compose.yml

2. Run the scan !

   docker-compose -f scan.docker-compose.yml up

1. On internet-connected machine :

clairctl --config clair_config/config.yml export-updaters updates.gz

ℹ️ The archive will be ~8.5Gb

2. Transfer the updates.gz archive and run :

clairctl import-updaters http://web.svc/updates.gz

3. Matcher processes should have the disable_updaters key set to disable automatic updaters running.

matcher:
  disable_updaters: true