-
Feature Request
-
Resolution: Unresolved
-
Critical
-
None
-
None
-
None
-
None
-
None
-
Product / Portfolio Work
-
None
-
False
-
-
None
-
None
-
-
-
None
-
-
None
-
None
-
None
1. Proposed title of this feature request
Support Scanning Packages in Compiled Binaries
2. What is the nature and description of the request?
Support Scanning Packages in Compiled Binaries in Quay and Clair.
Supporting documents:
Google Artifact Registry: https://cloud.google.com/blog/products/devops-sre/java-and-go-vulnerability-scanning-support
Trivy: https://blog.aquasec.com/trivy-golang-scanning
3. Why does the customer need this? (List the business requirements here)
To make sure no Vulnerabilities exist in compiled Binaries
Currently, the customer has an Image that shows Healthy in Clair but Google Artifact Registry Shows 27 Vulnerabilities.
4. List any affected packages or components.
Quay
Clair
- is incorporated by
-
PROJQUAY-2195 Clair v4 can discover vulnerabilities in Golang applications
-
- Closed
-