quay/clair ? reverse-engineered prompt

Build me a Clair style service that can scan container images for known vulnerabilities.

I want to be able to send an OCI or Docker image to an API, have it analyze the image contents, and then return a list of matching security issues with enough detail to understand what is affected. It should feel like a real backend service I can run locally with Docker and also configure for production, with a sample config file and a simple way to start the whole stack.

Make the project easy to work with, include clear health endpoints, and organize the code so the main pieces for indexing, matching, notifications, and HTTP handling are separated cleanly. If you need to, look up current docs online for any Clair specific behavior or expected API details. I also want sensible defaults, good logging, and a straightforward local development setup so I can try it quickly without a lot of setup.