Comments (2)
EDIT:
IPv4 works but the server opened by clair seems to be a ipv6 listener which is not yet supported by Docker Desktop and here.
EDIT:
Could you add IPv4 support for the fileserver?
EDIT: Following change to server.go and make build
should fix it (tested on WSL)
Line 16, change server := &http.Server{Addr: ":" + httpPort}
to server := &http.Server{Addr: "127.0.0.1:" + httpPort}
Warning. Current source throws errors
EDIT: How to build clair-v12
#prepare src directory
mkdir -p /home/$USER/go/src
#install go 1.9.7
sudo rm -rf /usr/local/go
wget https://golang.org/dl/go1.9.7.linux-amd64.tar.gz -O - | sudo tar -xzf - -C /usr/local
#export path or add it .bashrc / .zshrc / ... -> close session / make new session or source the appropriate file
export PATH=$PATH:/usr/local/go/bin
#install dep
sudo apt install go-dep
#download and extract source
wget https://github.com/arminc/clair-scanner/archive/refs/tags/v12.tar.gz -O - | tar -xzf - -C /home/$USER/go/src
#modify file (look above) and compile
cd /home/$USER/go/src
make ensure
make build
#copy new clair-scanner
sudo cp clair-scanner-12 /usr/local/bin/clair-scanner
from clair-scanner.
It works with Docker Desktop. Pay attention to the IP address. Here is the issue: #42
I had to indicate my gateway IP to make it work.
from clair-scanner.
Related Issues (20)
- False positive reported on postgres:13.1-alpine: CVE-2020-28928 (musl package) HOT 4
- clair-local-scan container fails to scan & crashes: fatal: unable to access 'https://git.launchpad.net/ubuntu-cve-tracker/': The requested URL returned error: 503 HOT 2
- Unknown issues with debian buster HOT 1
- Ability to stop while scanning HOT 1
- clair-scanner not working for clair-scanner_linux_amd64 HOT 2
- Could not analyze layer: POST to Clair failed Post http://clair:6060/v1/layers: dial tcp: lookup clair on 127.0.0.11:53: server misbehaving HOT 1
- Quay Clair - Could not get an output on scanning the container images
- Add second method of whitelisting two CVEs for one system lib and container
- clair scanner falsly reports NodeJS CVE against NodeJS-12
- Maintained Badge show No! (Since 2020)
- Scanning Ubuntu 21.10 does find any vulnerabilities (it should)
- Clair reporting same package in different versions
- Can we exit the clair scan, when high severity is detected?
- Can I use podman with clair-scanner?
- clair-scanner not working for UBI9 image.
- [CRIT] Could not analyze layer: POST to Clair failed Post http://127.0.0.1:6060/v1/layers: dial tcp 127.0.0.1:6060: getsockopt: connection refused
- CVE-2023-38408 is not found on any images that other scanners show have it
- "clair" container quits with {"Event":"pgsql: could not open database: dial tcp 172.17.0.2:5432: connect: connection timed out ...}}
- clair is allways showing resut OK HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from clair-scanner.