Ross ROSS = Recommend OSS · open-source software intelligence for agents

quay/clair

Vulnerability Static Analysis for Containers observed · 2026-08-28

github.com/quay/clair · homepage · Go · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

74/100

  • Activity 99
  • Release rhythm 28
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 426
  • age_days: 3946
  • days_rel: 266
  • days_push: 8
  • n_releases_24m: 2

Full methodology

Adoption not part of the score

11052 stars · 1216 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Clair is an open-source service for static analysis of vulnerabilities in container images (OCI and Docker). It indexes image contents via an API and matches them against continuously updated vulnerability databases.

Use cases

  • scan container images for known vulnerabilities
  • check docker images for CVEs before deployment
  • integrate vulnerability scanning into CI/CD pipeline
  • audit kubernetes workload images for security issues
  • index OCI image layers and match against vulnerability feeds
  • self-host a container vulnerability scanner

When to choose

  • you need automated CVE scanning of OCI or Docker images in a pipeline
  • you want a self-hosted, API-driven container security scanner
  • you need support for many Linux distro package formats and language packages

When to avoid

  • you need runtime or dynamic analysis of running containers
  • you want a simple one-shot CLI scanner without running a service
  • you only scan non-container artifacts like VMs or bare hosts

Facets

service · maturity active

vulnerability-scanning security http-server api-framework security developer-tools go self-hosted cloud container-security static-analysis oci-images docker-images vulnerability-database quay containers devops linux docker kubernetes

2 sources

Member repositories

RepositoryRoleHealth v2
quay/clairmain74

For agents

markdown · JSON · MCP: product_card(name="quay/clair")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem