-
|
I'm building an image in a gitlab ci workflow. I'd like to run clair on the built image. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 1 reply
-
|
Running Clair proper is probably not what you want, as you'd need to work out how to make all the layers available over HTTP. I'd suggest you take clair-action and attempt to adapt what the GitHub Actions workflow does into a Gitlab CI job, similar to how there's some Tekton help in that repo. |
Beta Was this translation helpful? Give feedback.
-
|
Thanks for the advice. Apparently, Gitlab has a built in feature for containers scanning based on Trivy and Grype. |
Beta Was this translation helpful? Give feedback.
Running Clair proper is probably not what you want, as you'd need to work out how to make all the layers available over HTTP. I'd suggest you take clair-action and attempt to adapt what the GitHub Actions workflow does into a Gitlab CI job, similar to how there's some Tekton help in that repo.