Vulnerability Scanning (Clair)
Last updated
Was this helpful?
v0.6
Last updated
Was this helpful?
Prerequisite: Please make sure to install Build and Deploy (CI/CD) integration. To install it, click .
Clair integration enables you to scan the vulnerabilities of the images during the time of image build only.
While building the container images, it is important to know how secure the application is, before it is deployed. In the source code , the third party libraries and outdated libraries might be used that can add vulnerabilities to the images we deploy. Devtron provides Clair integration for scanning vulnerabilities of the images.
Features:
You can enable image scanning if it is required.
You can set security policies according to your requirements.
If you set security policies to block, it blocks deployment of the application.
Ability to define hierarchical security policy (Global / Cluster / Environment / Application) to allow / block vulnerabilities based on criticality (High / Moderate / Low).
Compares the vulnerabilities against a whitelist.
Shows security vulnerabilities detected in the deployed applications.
On the Devtron Stack Manager > Discover page, click the Vulnerability Scanning (Clair).
On the Discover Integrations/Vulnerability Scanning (Clair) page, click Install.
The installation status may be one of the following:
Install
The integration is not yet installed.
Initializing
The installation is being initialized.
Installing
The installation is in progress. The logs are available to track the progress.
Failed
Installed
The integration is successfully installed and available on the Installed page.
Request timed out
A list of installed integrations can be viewed on the Devtron Stack Manager > Installed page.
Installation failed and the logs are available to troubleshoot. You can retry the installation or .
The request to install has hit the maximum number of retries. You may retry the installation or for further assistance.
To update an installed integration, please .