Clair should provide some sort of plugin mechanism for runtime extensibility.
This would allow people/teams in the Clair ecosystem to integrate with Clair without having to make source-level changes in Clair or its dependencies. It also would allow operators to tailor their Clair deployment.
- incorporates
-
CLAIRDEV-47 Evaluate a plugin architecture for clairv4
- Refinement
-
CLAIRDEV-23 Clair to support single source of vulnerabilities
- Refinement
- relates to
-
PROJQUAY-3199 As a user of Quay 3.7, my Clair scanning results should only contain CRDA results if I have explicitly enabled them.
- Closed