Container Scanning with Claire and DC/OS

Available through the universe is a community supported package called Claire based on the open source project Claire which can scan containers.

In this article we will explore the steps required to install and setup Claire on DC/OS as well as some examples illustrating its usage.

Reasons for Container scanning:

• Developer now in control of packages so a tool is necessary to understand which packages are in use. Containers are in fact opaque.
• Scanning should be part of the CI/CD pipeline

Resources

• Clair: The container Image Security Analyzer: https://www.youtube.com/watch?v=Kri67PtPv6s
• https://www.youtube.com/watch?v=ynwKi2yhIX4