diff --git a/modules/about-clair.adoc b/modules/about-clair.adoc index 2f3e1504d..a9825e682 100644 --- a/modules/about-clair.adoc +++ b/modules/about-clair.adoc @@ -38,7 +38,7 @@ Clair supports identifying and managing the following dependencies: * Python * Ruby -This means it can analyze and report on the third-party libraries and packages that a project in these languages relies on to work correctly. +This means that it can analyze and report on the third-party libraries and packages that a project in these languages relies on to work correctly. [id="clair-containers"] == Clair containers diff --git a/modules/clair-vulnerability-scanner-hosts.adoc b/modules/clair-vulnerability-scanner-hosts.adoc index 4857eb947..f0fb1cf00 100644 --- a/modules/clair-vulnerability-scanner-hosts.adoc +++ b/modules/clair-vulnerability-scanner-hosts.adoc @@ -6,6 +6,9 @@ [id="clair-vulnerability-scanner-hosts"] = Clair vulnerability databases +Clair uses the link:https://osv.dev/[Open Source Vulnerability (OSV) Database] to report issues in your images. OSV includes popular sources like Github Security Advisories and Python Packaging Authority (PyPA), and other ecosystems like AlmaLinux, Alpine, and so on, to report vulnerability information. + +//// Clair uses the following vulnerability databases to report for issues in your images: * Ubuntu Oval database @@ -17,6 +20,7 @@ Clair uses the following vulnerability databases to report for issues in your im * VMWare Photon OS database * Amazon Web Services (AWS) UpdateInfo * Pyup.io (Python) database +//// For information about how Clair does security mapping with the different databases, see link:https://quay.github.io/claircore/concepts/severity_mapping.html[ClairCore Severity Mapping]. \ No newline at end of file