diff --git a/clair/vulns.go b/clair/vulns.go
index e42d437c..b8af5b41 100644
--- a/clair/vulns.go
+++ b/clair/vulns.go
@@ -109,7 +109,7 @@ func (c *Clair) NewClairLayer(r *registry.Registry, image string, fsLayers []sch
 		}
 	}
 
-	if useBasicAuth {
+	if token == "" || useBasicAuth {
 		h = map[string]string{
 			"Authorization": fmt.Sprintf("Basic %s", base64.StdEncoding.EncodeToString([]byte(r.Username+":"+r.Password))),
 		}