{"id":27390330,"url":"https://github.com/ailispaw/clair-barge","last_synced_at":"2026-02-13T00:32:44.021Z","repository":{"id":89119629,"uuid":"66228861","full_name":"ailispaw/clair-barge","owner":"ailispaw","description":null,"archived":false,"fork":false,"pushed_at":"2016-08-22T04:32:49.000Z","size":8,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2025-04-13T19:51:52.279Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ailispaw.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2016-08-22T01:05:06.000Z","updated_at":"2016-08-22T01:05:06.000Z","dependencies_parsed_at":"2023-06-14T00:45:28.600Z","dependency_job_id":null,"html_url":"https://github.com/ailispaw/clair-barge","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/ailispaw/clair-barge","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ailispaw%2Fclair-barge","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ailispaw%2Fclair-barge/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ailispaw%2Fclair-barge/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ailispaw%2Fclair-barge/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ailispaw","download_url":"https://codeload.github.com/ailispaw/clair-barge/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ailispaw%2Fclair-barge/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":262279180,"owners_count":23286551,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-04-13T19:39:40.915Z","updated_at":"2026-02-13T00:32:38.969Z","avatar_url":"https://github.com/ailispaw.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# Clair on Barge with Vagrant\n\nhttps://github.com/coreos/clair\n\n\u003e Clair is an open source project for the static analysis of vulnerabilities in appc and docker containers.\n\nThis builds a Clair environment with [Vagrant](https://www.vagrantup.com/) instantly.\n\n## Requirements\n\n- [VirtualBox](https://www.virtualbox.org/)\n- [Vagrant](https://www.vagrantup.com/)\n\n## Boot up\n\n```bash\n$ vagrant up\n```\n\nThat's it.\n\nhttps://github.com/coreos/clair#hello-heartbleed\n\n\u003e During the first run, Clair will bootstrap its database with vulnerability data from its data sources. It can take several minutes before the database has been fully populated.\n\nYou can check the status by using `docker logs clair` and you will see `updater: update finished`.\n\n```bash\n$ docker logs clair\n2016-08-21 23:40:28.804803 I | pgsql: running database migrations\ngoose: migrating db environment '', current version: 0, target: 20151222113213\nOK    20151222113213_Initial.sql\n2016-08-21 23:40:29.101777 I | pgsql: database migration ran successfully\n2016-08-21 23:40:29.114150 I | notifier: notifier service is disabled\n2016-08-21 23:40:29.114338 I | api: starting main API on port 6060.\n2016-08-21 23:40:29.115062 I | api: starting health API on port 6061.\n2016-08-21 23:40:29.115157 I | updater: updater service started. lock identifier: 11bf7927-b6f2-4b4e-a5ac-62c292f7b9c7\n2016-08-21 23:40:29.237012 I | updater: updating vulnerabilities\n2016-08-21 23:40:29.237058 I | updater: fetching vulnerability updates\n2016-08-21 23:40:29.237089 I | updater/fetchers/ubuntu: fetching Ubuntu vulnerabilities\n2016-08-21 23:40:29.238441 I | updater/fetchers/debian: fetching Debian vulnerabilities\n2016-08-21 23:40:29.239648 I | updater/fetchers/rhel: fetching Red Hat vulnerabilities\n2016-08-21 23:54:17.457960 I | updater: adding metadata to vulnerabilities\n2016-08-22 00:18:51.876149 I | updater: update finished\n```\n\n## Analyse vulnerabilities in a Docker image with `analyze-local-images` command\n\n```bash\n$ vagrant ssh\n[bargee@barge ~]$ docker pull ailispaw/ubuntu-essential:14.04\n14.04: Pulling from ailispaw/ubuntu-essential\nc298559fc8ae: Pull complete\n1c93d6585dd1: Pull complete\nDigest: sha256:8bed724d571307e245a27ac50ba0b0ee2119b5ba7b57109fbddfbb5466679241\nStatus: Downloaded newer image for ailispaw/ubuntu-essential:14.04\n[bargee@barge ~]$ analyze-local-images -minimum-severity Medium ailispaw/ubuntu-essential:14.04\n2016-08-22 02:27:10.048230 I | Saving ailispaw/ubuntu-essential:14.04 to local disk (this may take some time)\n2016-08-22 02:27:14.070162 I | Retrieving image history\n2016-08-22 02:27:14.103607 I | Analyzing 2 layers...\n2016-08-22 02:27:14.103791 I | Analyzing c298559fc8ae67275ae2d0d36cfbc3a2960b15440d6dcedbec13d0174ace4e1d\n2016-08-22 02:27:14.114818 I | Analyzing 1c93d6585dd188283a8706f1df22d662cdf7a49700286a582f453e2a24715eba\n2016-08-22 02:27:14.117480 I | Retrieving image's vulnerabilities\nClair report for image ailispaw/ubuntu-essential:14.04 (2016-08-22 02:27:14.14364884 +0000 UTC)\nCVE-2016-2781 (Medium)\n        nonpriv session can escape to the parent session by using the TIOCSTI ioctl\n\n        Package:       coreutils @ 8.21-1ubuntu5.4\n        Link:          http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-2781\n        Layer:         c298559fc8ae67275ae2d0d36cfbc3a2960b15440d6dcedbec13d0174ace4e1d\n\nCVE-2016-1238 (Medium)\n        (1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff,\n        (3) cpan/Archive-Tar/bin/ptargrep, (4) cpan/CPAN/scripts/cpan,\n        (5) cpan/Digest-SHA/shasum, (6) cpan/Encode/bin/enc2xs, (7)\n        cpan/Encode/bin/encguess, (8) cpan/Encode/bin/piconv, (9)\n        cpan/Encode/bin/ucmlint, (10) cpan/Encode/bin/unidump, (11)\n        cpan/ExtUtils-MakeMaker/bin/instmodsh, (12) cpan/IO-Compress/bin/zipdetails,\n        (13) cpan/JSON-PP/bin/json_pp, (14) cpan/Test-Harness/bin/prove, (15)\n        dist/ExtUtils-ParseXS/lib/ExtUtils/xsubpp, (16) dist/Module-CoreList/corelist,\n        (17) ext/Pod-Html/bin/pod2html, (18) utils/c2ph.PL, (19) utils/h2ph.PL,\n        (20) utils/h2xs.PL, (21) utils/libnetcfg.PL, (22) utils/perlbug.PL, (23)\n        utils/perldoc.PL, (24) utils/perlivp.PL, and (25) utils/splain.PL in Perl 5.x\n        before 5.22.3-RC2 and 5.24 before 5.24.1-RC2 do not properly remove . (period)\n        characters from the end of the includes directory array, which might allow local\n        users to gain privileges via a Trojan horse module under the current working\n        directory.\n\n        Package:       perl @ 5.18.2-2ubuntu1.1\n        Link:          http://people.ubuntu.com/~ubuntu-security/cve/CVE-2016-1238\n        Layer:         c298559fc8ae67275ae2d0d36cfbc3a2960b15440d6dcedbec13d0174ace4e1d\n\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Failispaw%2Fclair-barge","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Failispaw%2Fclair-barge","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Failispaw%2Fclair-barge/lists"}