Clair

Clair performs offline scanning of container images without executing them, efficiently identifying known vulnerabilities from databases, as highlighted in its static analysis approach.

It supports both OCI and Docker image formats, covering the major specifications used in container ecosystems, ensuring compatibility with standard tools.

With its API-driven indexing, Clair allows seamless integration into CI/CD pipelines and custom security tooling for automated workflows, as emphasized in the README.

As an open-source project under Apache 2.0, Clair provides full visibility into its scanning process and vulnerability data, aligning with its goal of transparent security.