Sign inSign up
amazon-k8s-cni

dhi.io/amazon-k8s-cni

amazon-vpc-cni-k8s 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.23-debian-fips-dev, 1.23-debian13-fips-dev, 1.23-fips-dev, 1.23.2-debian-fips-dev, 1.23.2-debian13-fips-dev, 1.23.2-fips-dev

Index digest:

sha256:1df8cc8486e8b53e8070729fd865b9022663062c2535ad0ee8b5cb418112b93e

Manifest digest:

sha256:142af55c3c2ddb32c021c4381c6fcf45c7f501ab987f1e177e4801547a115626

Size

95.32 MB

Last pushed

15 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/amazon-k8s-cni:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/amazon-k8s-cni:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/amazon-k8s-cni@sha256:2ce38bd1a5c42fb111257cf6aedc229eb2bc15e9fc682606c7a488726bdd35a3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/amazon-k8s-cni@sha256:d246f5097ade75ab83617f3283ec229cf8320b823708630c69c564d14fe065fe
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/amazon-k8s-cni@sha256:f8802642dd807b1a2f948a710fd24e49dd43065e9f05a14387e79f98164cb310
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/amazon-k8s-cni@sha256:bb2e3a4d5704ff619a0ecb9eb61933895b87a4d268eac440f09aa63d5903e53f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/amazon-k8s-cni@sha256:43f089c46658d1e6464373a9ff949c7ea09481d7f34522ed616e98033bb13045
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/amazon-k8s-cni@sha256:f02f7927f6c6dfdc3ce2fbd8c5432d592dd5ffafb7755cc8296a02e2b2fcaf0c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/amazon-k8s-cni@sha256:3708b074857316513720e4278e225d8be60215ffc466bf18c42bfeecc6a4811f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/amazon-k8s-cni@sha256:7f6a6bc31db2c8f2e8e4ff14be60827e72ab82c9b0e8b3370d76105f74d322b0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/amazon-k8s-cni@sha256:b17fa47a379bd5e4b31ff173418bae22e837f2865ce80794025a345d6ddaf19a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/amazon-k8s-cni@sha256:1fa263d64e0ebac7e108e389b9b117b2941303bc971c925b6769b00b76105277
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/amazon-k8s-cni@sha256:f17f7d23cee0242414b94ac580a8411da6f8bc53c23f6cd242e51b722c833bd8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/amazon-k8s-cni@sha256:81e7d5d1995042a7ce89e717048da7bc14af1ad476d59dc09fdd3195c552ce99
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/amazon-k8s-cni@sha256:6468cb2cb9d8caf8d505b42c23f3cb6f04dbe3545ac17f01c3c29e478d7072d5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/amazon-k8s-cni@sha256:50635c596ef545131deea38cd9b3305c54abd601a362e34e98cb62471f385365
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/amazon-k8s-cni@sha256:fcd03fa57de60c4872aea47865e3491ff3b0f38f472e6bafe0cf5e3c4d14dcf2
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/amazon-k8s-cni@sha256:dd1d89f31c1d29ccf38a87a9c4c53b9a0f5218542cf781380bf540e6e6aeba38
SPDX SBOMhttps://spdx.dev/Documentdhi.io/amazon-k8s-cni@sha256:4d34bcadb7bc7e03e7c8efae11454ad7e9697fffdbb52a09059ff2a4e6a9d318