External reviews
External reviews are not included in the AWS star rating for the product.
State-of-the-Art Static Analysis for Vunerabilities
What do you like best about the product?
When updates to vulnerability metadata occur, a notification is sent to alert systems that a change has occurred, and can be therefore fixed.
What do you dislike about the product?
As a CoreOS Clair user, I'd like to have CoreOS Clair to return vulnerable ancestry changes instead of computing that on Client side.
What problems is the product solving and how is that benefiting you?
CoreOS Clair has made it transparently clear the issues of a particular image and the technology allows the avoidance to the need to rescan images.
- Leave a Comment |
- Mark review as helpful
Clair is an easy way to scan container for vulnerabilities
What do you like best about the product?
I like how easy it is to scan containers for vulnerabilities. You can point an image at it and it will give you a full report.
What do you dislike about the product?
I dislike that it's only static analysis, but it does get the job done.
What problems is the product solving and how is that benefiting you?
We needed a way to scan images during CI/CD before we pushed them to our master registry. Clair fit right into our pipeline and we can fail a build if it fails a the vulnerability scan.
Recommendations to others considering the product:
You may have to script up a wrapper around the tool to use for CI/CD, but it's definitely worth it.
Great Open Source Tool
What do you like best about the product?
One thing I like about this tool is the ease of use when scanning of vulnerabilities. This can easily be deployed with Kubernetes and Docker. Easy to use with enterprise distros like Red Hat. I really like how easy it is to set up on your machine. It takes only a few minutes with a Docker container to launch the platform.
What do you dislike about the product?
It is an open source tool and not exactly reliable. There are updates that get launched for the tool; but there is no knowing whether the tool is completely up to date. It is not in a stable state for long term use and can require a lot of administration in order to support it.
What problems is the product solving and how is that benefiting you?
We are using CoreOS for vulnerability assessment. I am using this tool with Docker; in order to launch this tool on various servers; that way it can be used for vulnerability assessments. Benefits I have realized are that if you are already an AWS and Red Hat user; this tool is easy to set up.
Recommendations to others considering the product:
For anyone using CoreOS; I strongly recommend using AWS services as well as Red Hat enterprise; this is a great tool to implement into this kind of architecture.
Nice and efficient software
What do you like best about the product?
vulnerability newsfeed and Pre-production analysis
What do you dislike about the product?
Did not find any kind of problem yet. Very impressive
What problems is the product solving and how is that benefiting you?
OS tech vulnerability test
Recommendations to others considering the product:
Very effective software
CoreOS
What do you like best about the product?
You can set automatic builds to test your code.
It allows for organized planning through the Boards section.
It allows for organized planning through the Boards section.
What do you dislike about the product?
With all of the features, it's easy to get lost.
What problems is the product solving and how is that benefiting you?
I am trying to solve a business problem
Old version, not usable
This image is version 310.1.0 which is really old. It is so old that it seems even the updater is unable to upgrade to the latest version. A waste of time.
unstable
CoresOS is great in theory but we've found it to be a bit unstable in production. Machines running this AMI will tend to hang permanently randomly in tests.
showing 1 - 7