Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-4376

Clair doesn't scan Alpine Linux Container images appropriately

    XMLWordPrintable

Details

    • Bug
    • Resolution: Obsolete
    • Normal
    • None
    • None
    • clair
    • False
    • None
    • False
    • Hide

      Clair seems to scan correctly, if the database is not too old.
      It always works correctly on a fresh Clair install, which is why we can't find a way to reproduce the issue.
      Everytimes it happens it's on a Clair instance that is running for quite a while maybe 1-3 months.

      Show
      Clair seems to scan correctly, if the database is not too old. It always works correctly on a fresh Clair install, which is why we can't find a way to reproduce the issue. Everytimes it happens it's on a Clair instance that is running for quite a while maybe 1-3 months.
    • 0

    Description

      Clair detects false positives and does not fix itself when scanning Alpine Linux container (container provided by Microsoft for .net core). The workaround is to delete Clair's DB . This need to be done each time a new Alpine Linux container is released. 

      Clair is sending back this message "manifest already scanned", even when the scan is forced. 

      SR related :  03210422 

      Attachments

        Activity

          People

            Unassigned Unassigned
            michael.lessard Michael Lessard
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: