IDG Contributor Network: How Core OS aims to make containers more secure

As container technologies grow in popularity, security is becoming a critical issue. In February, Docker addressed one of the major security concerns by adding support for user namespace the Docker 1.10 release.
Now the Core OS team has launched an open source project called Clair, an API-driven analysis service that inspects container images for known security flaws.  Developers can use it to build services that scan containers for security threats and vulnerabilities.