Clair is an open source static analysis tool designed for vulnerability detection in application containers, including OCI and Docker formats. The tool provides an API that allows clients to index their container images and match them against a database of known vulnerabilities. This enables organizations to identify security issues within their containerized applications before deployment. Clair operates by analyzing container layers and comparing the installed packages and components against vulnerability databases to identify potential security risks. The tool focuses on providing transparency into the security posture of container-based infrastructure. The project includes comprehensive documentation covering architecture and operational procedures. It is maintained as an open source project under the Apache 2.0 license, with community support available through mailing lists and IRC channels.