Vulnerability Static Analysis for Containers
Alternatives To Clair
Project NameStarsDownloadsRepos Using ThisPackages Using ThisMost Recent CommitTotal ReleasesLatest ReleaseOpen IssuesLicenseLanguage
Clair9,40335192 days ago139March 21, 202211apache-2.0Go
Vulnerability Static Analysis for Containers
Scanners Box7,014
a month ago2
A powerful and open-source toolkit for hackers and security automation - 安全行业从业者自研开源扫描器合辑
Brakeman6,6165,9841082 days ago144August 10, 202299otherRuby
A static analysis security vulnerability scanner for Ruby on Rails applications
Grype5,429620 hours ago161September 20, 2022213apache-2.0Go
A vulnerability scanner for container images and filesystems
Pyt2,0051112 years ago15November 01, 201820gpl-2.0Python
A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications
Awesome Golang Security1,768
5 months ago3
Awesome Golang Security resources 🕶🔐
Anchore Engine1,528
2 months ago249apache-2.0Python
A service that analyzes docker images and scans for vulnerabilities
a month ago13apache-2.0Kotlin
Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.
Bearer9043320 hours ago109May 03, 201927otherC
Code security scanning tool (SAST) that discover, filter and prioritize security risks and vulnerabilities leading to sensitive data exposures (PII, PHI, PD).
Horusec86928 days ago40November 30, 202170apache-2.0Go
Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.
Alternatives To Clair
Select To Compare

Alternative Project Comparisons


Docker Repository on Quay PkgGoDev IRC Channel

Note: The main branch may be in an unstable or even broken state during development. Please use releases instead of the main branch in order to get stable binaries.

Clair Logo

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker).

Clients use the Clair API to index their container images and can then match it against known vulnerabilities.

Our goal is to enable a more transparent view of the security of container-based infrastructure. Thus, the project was named Clair after the French term which translates to clear, bright, transparent.

The book contains all the documentation on Clair's architecture and operation.



See CONTRIBUTING for details on submitting patches and the contribution workflow.


Clair is under the Apache 2.0 license. See the LICENSE file for details.

Popular Vulnerabilities Projects
Popular Static Analysis Projects
Popular Security Categories
Related Searches

Get A Weekly Email With Trending Projects For These Categories
No Spam. Unsubscribe easily at any time.
Static Analysis