sergray / claircli

Simple command line tool to interact with CoreOS Clair

claircli

claircli is a simple command line tool to interact with CoreOS Clair

• analyze loacl/remote docker image with clair
• generate HTML/JSON report, the html report template is from analysis-template.html

Installation

pip install claircli

Commands

claircli -h
usage: claircli [-h] [-V] {batch-analyze,fuzzy-analyze} ...

Simple command line tool to interact with CoreOS Clair

optional arguments:
  -h, --help            show this help message and exit
  -V, --version         show program's version number and exit

subcommands:
  Subcommands of claircli

  {batch-analyze,fuzzy-analyze}
    batch-analyze       Batch analyze docker images with clair
    fuzzy-analyze       Fuzzy analyze docker images with clair

Optional whitelist yaml file

This is an example yaml file. You can have an empty file or a mix with only common or <distribution>.

common:
  CVE-2017-6055: XML
  CVE-2017-5586: OpenText
ubuntu:
  CVE-2017-5230: XSX
  CVE-2017-5586: OpenText
alpine:
  CVE-2017-3261: SE