Currently, Clair only looks at the x86_64 mirrors Amazon Linux images. Some Amazon Linux distributions also support arm64 versions, so I imagine there are arm64 mirrors which we will need to look at for vulnerabilities. This may not be the case, but it may be worth looking into, if we have not done so already.