Container Scanning without setting up Clair server

What

This repository contains a working example of local container scanning using arminc's prefilled CVE database and Clair. Using this, you won't need to have to setup a whole Clair server, or fill and maintain a CVE database. The bash code is pretty universally applicable, the example is written for gitlabCI and does not require Gitlab Ultimate subscription.

Scan subject

Subject of the scan is a kube-toolbox container I use for K8S work mainly on AWS.

Requirements

Requirements are:

• Docker

Requirements using the GitlabCI setup:

• docker-executor --privileged