It has a form of protocol://host:port – protocoland port default to http and 6060 respectively and may be omitted. Klar can be configured via the following environment variables: It will return 2 if an error has prevented the image from being analyzed. Klar process returns if 0 if the number of detected high severity vulnerabilities in an image is less than or equal to a threshold (see below) and 1 if there were more. Make sure your Go binary folder is in your PATH (e.g. Make sure you have Go language compiler installed and configured

The simplest way is to download the latest release (for OSX and Linux) from and put the binary in a folder in your PATH (make sure it has execute permission). It serves as a client which coordinates the image checks between the Docker registry and Clair. It’s a single binary which requires no dependencies. It is designed to be used as an integration tool so it relies on environment variables. Klar is a simple tool to analyze images stored in a private or public Docker registry for security vulnerabilities using Clair.

Kali docker