dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.1-debian-fips-dev, 1.10.1-debian13-fips-dev, 1.10.1-fips-dev
sha256:121a72a51b220709445c5566be823e3c5282a2f5bc53cb95d5d409c560da45c8
Manifest digest:sha256:8d7c92a12b9803c28b75c03aa624b51837a0b96163c7df88785a2093f59736d0
Size
69.79 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:c5d16d4395bcf7d459a7b272e9b791f8ff5e896e35aa2fef9ec5f612b8d39ee8 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:54e902c31093ecc4585cc51a2a9e3e152adc9da23529fcd2d210cbf3b9f77cfe |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:d7622f98296e0984ac51cfd1b70dfc25cfcf7a9b09c0bb01e7ac2d2359f64339 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:97c7d4361a6e875ad014cc51d0b893cb1aa0a15a31781bc6130623f275e4cbcd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:45c6dc6eba25e0971f7cff26dfe27d648cf7328866eedf658e8557d7e8694994 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:ede502e36636cde8efcf1689eb070203874476be85e8224cdd76efc54e9a8d3e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:551ebe9fceb6dc9a98602dcf39d7557c8a8c5a52e3d7b4f078994c10fd9575da |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:5abde919e2316d7549c933fa8277df3fa2a084eed584097c38facef940f263f3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:52ce130cc7f92214bbd18406f92ad3603f37b618615cba3dada7868c17f2674c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:e8f3e0b166c094fdf0ef3600da9f62bda9c69c88a80d867cc9e32d99cd667e37 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:5b528d3bd6850fcd2e7e21f29d6c9b1d405c51c49e9ef625c85248d7e8848494 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:ec1a7f24490e50288ceba4e5e3f93f9dbdbf6ccb3f04b79f048adb6030d99327 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:b63adc6dc60c47e713e40bd3b5d5c6a98068fc3eb7a53b645389a2e2c465f793 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:595af729ef162aa48ddfea58efed05d9f17aa9f277a1b9df0133496f71934b75 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:9cae4240f5a4c9d628f1abadbb78ac31bf580ccc787d75c48e3eb57d31d7c567 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:7cec48e69dc664b8bbe17aeacbc25c76d4fbde7ed4298b2e0e5ed76bca89df92 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:83cc89a14e79d95b4787cf34bded45595b7b070759af1c433962c26f55e70071 |