File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1212/book
1313/contrib
1414! /contrib /cmd
15+ ! /contrib /art
1516/Documenatation
1617/etc
1718/local-dev
Original file line number Diff line number Diff line change 11* @ quay/clair @ quay/clair-maintainers
2+ contrib /art /Containerfile.art @ quay/redhat-team
Original file line number Diff line number Diff line change 1+ FROM registry.redhat.io/ubi9/go-toolset:1.25 AS build
2+
3+ WORKDIR /app
4+ COPY . .
5+
6+ RUN GOEXPERIMENT=strictfipsruntime go build -tags strictfipsruntime -mod=mod \
7+ -ldflags="-s -w" \
8+ -o . \
9+ -trimpath \
10+ ./cmd/...
11+
12+ FROM registry.redhat.io/ubi9/ubi-minimal:latest
13+
14+ LABEL com.redhat.component="clair-container"
15+ LABEL name="quay/clair-rhel9"
16+ LABEL io.k8s.display-name="Red Hat Quay - Clair"
17+ LABEL io.k8s.description="Clair vulnerability scanner for Red Hat Quay"
18+ LABEL io.openshift.tags="quay,clair,security"
19+ LABEL summary="Clair vulnerability scanner for Red Hat Quay"
20+ LABEL description="Clair vulnerability scanner for Red Hat Quay"
21+ #LABEL cpe="cpe:/a:redhat:quay::el9"
22+ LABEL vendor="Red Hat, Inc."
23+ LABEL distribution-scope="restricted"
24+ LABEL url="https://docs.redhat.com/en/documentation/red_hat_quay"
25+ LABEL maintainer="support@redhat.com"
26+
27+ ENTRYPOINT ["/usr/bin/clair"]
28+ VOLUME /config
29+ EXPOSE 6060
30+ WORKDIR /run
31+
32+ ENV CLAIR_CONF=/config/config.yaml \
33+ CLAIR_MODE=combo \
34+ SSL_CERT_DIR="/etc/ssl/certs:/etc/pki/tls/certs:/var/run/certs"
35+
36+ USER nobody:nobody
37+
38+ COPY --from=build /app/clair /bin/clair
39+ COPY --from=build /app/clairctl /bin/clairctl
40+ ADD https://raw.githubusercontent.com/quay/quay-konflux-components/redhat-3.17/components/clair/data/repository-to-cpe.json /data/
41+ ADD https://raw.githubusercontent.com/quay/quay-konflux-components/redhat-3.17/components/clair/data/container-name-repos-map.json /data/
You can’t perform that action at this time.
0 commit comments