# clair mit Homebrew, Nix, zypper installieren Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für clair in AI-Agent-Workflows. ## Installation ```sh sudo av install brew:clair ``` Weitere Installationsbefehle: ### macOS - Homebrew (100%): ```sh brew install clair ``` Evidenz: local Homebrew formula metadata ### Linux - Nix (92%): ```sh nix profile install nixpkgs#clair ``` Evidenz: nixpkgs package indexes: pkgs/by-name/cl/clair/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper (92%): ```sh sudo zypper install clair ``` Evidenz: openSUSE Tumbleweed package metadata: clair from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst ## Paketfakten - **Paketschlüssel:** brew:clair - **Paketmanager:** Homebrew - **Paketmanager-Seite:** - **Version:** 4.8.0 - **Quellzusammenfassung:** Vulnerability Static Analysis for Containers - **Homepage:** - **Repository:** - **Upstream-Dokumentation:** - **Lizenz:** Apache-2.0 - **Quellarchiv:** - **Zuletzt aktualisiert:** 2026-07-27T22:04:00+02:00 - **Generiert:** 2026-08-04T22:13:35+00:00 ## Executables - clair (cli) - clair (Alias) ## Build-Abhängigkeiten - go ## Installationsverhalten - Post-install-Hook: nicht definiert - Bottle: verfügbar auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, sonoma, ventura, x86_64_linux ## Version und Aktualität - Seite generiert: 2026-08-04 - Manager-Version: 4.8.0 - Manager aktualisiert: 2026-07-27 - lokale Daten: OK - Upstream-Repository: https://github.com/quay/clair - neueste erkannte Version: v4.8.0 (aktuell) ## Projektgeschichte und Nutzung Clair is Quay's open source service for static analysis of vulnerabilities in application container images, including OCI and Docker images. It is notable in package-manager culture because it made vulnerability metadata, image indexing, and registry-side security scanning part of the ordinary container toolchain. ### Projektgeschichte The public repository was created in November 2015 and its README describes the project goal as making container-based infrastructure more transparent. Clair later evolved into the v4 architecture documented in the Clair book, with separate indexer, matcher, notifier, and combo operating modes configured by YAML or JSON. ### Adoptionsgeschichte Clair is distributed as a Homebrew formula and appears in other package sets in the supplied input, while its README also points users to stable GitHub releases and a Quay container image. Its adoption path is tied to container registries and CI systems that need image vulnerability matching against known vulnerability feeds. ### Wie es verwendet wird Clients use the Clair API to index container images and match indexed contents against vulnerability data. Operators run Clair with a structured configuration file, commonly under /etc/clair, and select a service mode such as indexer, matcher, notifier, or combo. ### Warum Paket-Nerds sich dafür interessieren Clair matters to package nerds because it connects OS-package and language-package vulnerability databases to container layers. It sits at the point where package manifests, distribution advisories, OCI images, and registry policy meet. ### Zeitleiste - 2015: Public GitHub repository created and initial public release v0.0.1 published. - 2016: v1 releases established Clair as a container vulnerability analysis service. - 2020: Clair v4 line documented a service-oriented architecture with indexer, matcher, and notifier modes. - 2024: v4.7.0 added documented drop-in configuration file support. - 2025: v4.9.0 release published. ### Related projects - Related projects include Quay, OCI image tooling, Docker image tooling, vulnerability databases consumed by Clair matchers, and other image scanners such as Trivy and Grype. ### Quellen - - - - ## Sicherheitshinweise infrastructure mutation or orchestration signal. - **Geiger-Risiko:** orange / mittel - infrastructure mutation or orchestration signal ## Configuration and credential file locations These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval. ## Configuration files - Unix: /etc/clair/config.yaml, /etc/clair/config.json ## Details aus der Quelldatenbank - **Source Database:** Homebrew formula API - **Tap:** homebrew/core - **Full Name:** clair - **Version Scheme:** 0 - **Revision:** 0 - **Head Version:** HEAD - **Bottle Stable Root URL:** - **Deprecated:** no - **Disabled:** no - **Keg Only:** no - **URL Keys:** head, stable ## Andere Paketmanager-Einträge - Nix - clair: normalized package name match | nixpkgs package indexes: pkgs/by-name/cl/clair/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1 - zypper - clair - 4.9.0-1.4: normalized package name match | openSUSE Tumbleweed package metadata: clair from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Vulnerability Static Analysis for Containers | https://github.com/quay/clair - zypper - clairctl - 4.9.0-1.4: normalized package name match | openSUSE Tumbleweed package metadata: clairctl from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | CLI for the Clair Vulnerability scanner | https://github.com/quay/clair ## Verwandte Links - [Cloud CLI packages](https://pkg.so/de/cloud-clis/) - Belongs to a cloud or infrastructure command family. - [Source-control packages](https://pkg.so/de/source-control-tools/) - Belongs to a source-control command family. - [Secret-risk packages](https://pkg.so/de/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals. - [Terminal utility packages](https://pkg.so/de/terminal-utilities/) - Matched terminal and command-line workflow metadata. - [go](https://pkg.so/de/brew/go/) - Build dependency declared by Homebrew. - [syft](https://pkg.so/de/brew/syft/) - Shares pkgdb curated category or tags: cli, containers, security. - [grype](https://pkg.so/de/brew/grype/) - Shares pkgdb curated category or tags: cli, containers, security. - [snyk-cli](https://pkg.so/de/brew/snyk-cli/) - Shares pkgdb curated category or tags: cli, container-scanning, security, vulnerability-scanning. - [dependency-check](https://pkg.so/de/brew/dependency-check/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning. - [copa](https://pkg.so/de/brew/copa/) - Shares pkgdb curated category or tags: cli, containers, security, vulnerability-scanning. - [govulncheck](https://pkg.so/de/brew/govulncheck/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning. - [kics](https://pkg.so/de/brew/kics/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning. - [cargo-audit](https://pkg.so/de/brew/cargo-audit/) - Shares pkgdb curated category or tags: cli, security, vulnerability-scanning. - [flawfinder](https://pkg.so/de/brew/flawfinder/) - Security-sensitive metadata or terminology overlaps. Shared terms: analysis, cli, scanning, security, static. - [scrutineer](https://pkg.so/de/brew/scrutineer/) - Security-sensitive metadata or terminology overlaps. Shared terms: analysis, cli, containers, scanning, security. ## Combined YAML source View the package source record on GitHub. [combined/clair.yml](https://github.com/mxcl/pkgdb/blob/main/combined/clair.yml) ## Quellen - pkg.so package database - Geiger risk classifier - package-page enrichment - curated configuration and credential file locations - curated package history - package version freshness - pkgdb category and tag curation - package relationship graph - external package-manager database matches - cross-ecosystem install command graph