Clair

Clair is an open source project for the static analysis of vulnerabilities in application containers (currently including OCI and docker).

参考文献