portauthority | leverages Clair to scan Docker Registries | Continuous Deployment library

portauthority is a Go library typically used in Devops, Continuous Deployment, Docker applications. portauthority has no bugs, it has no vulnerabilities and it has low support. However portauthority has a Non-SPDX License. You can download it from GitHub.

Port Authority is an API service that delivers component based vulnerability assessments for Docker images at time of build and in run-time environments. The Port Authority API is capable of orchestrating scans of individual public or private images as well as scanning entire private Docker registries like Docker Hub, Google Container Registry or Artifactory. To accomplish this, Port Authority breaks each Docker image into layers and sends it to the open source static analysis tool Clair in the backend to perform the scans and identify vulnerabilities. Upon completion of this workflow Port Authority maintains a manifest of the images and scan results. Port Authority also supplies developers with customizable offerings to assist with the audit and governance of their container workloads. Port Authority provides a webhook that when leveraged by a Kubernetes admission controller will allow or deny deployments based off of user-defined policies and image attributes. Port Authority then achieves run-time inspection by integrating with Kubernetes to discover running containers and inventorying those deployed images for scanning.