goharbor / harbor-scanner-clair

Use Clair as a plug-in vulnerability scanner in the Harbor registry
https://goharbor.io/
Apache License 2.0
34 stars 26 forks source link

support for clair 4.x.y #24

Open piyush94 opened 3 years ago

piyush94 commented 3 years ago

Does the adapter support newer releases of Clair? i.e. 4.x.y

danielpacak commented 3 years ago

IIRC Clair v4 has changed the API. Currently this adapter officially supports version v2. Some more tests have to be done to confirm that it works with the newest Clair scanner. (I did a very quick test with Clair v4 some time back but it failed.)

I think we'd appreciate any help on that. The first step could be just to deploy Clair v4 and configure this adapter to use it, and report any issues that may occur during such test. After that we could plan for changes in code.

piyush94 commented 3 years ago

Yes, in v4 both the Clair API and database relations have changed. Let me see if i can try out the adapter with changes.