Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.1-debian-fips-dev, 1.10.1-debian13-fips-dev, 1.10.1-fips-dev

Index digest:

sha256:121a72a51b220709445c5566be823e3c5282a2f5bc53cb95d5d409c560da45c8

Manifest digest:

sha256:8d7c92a12b9803c28b75c03aa624b51837a0b96163c7df88785a2093f59736d0

Size

69.79 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:c5d16d4395bcf7d459a7b272e9b791f8ff5e896e35aa2fef9ec5f612b8d39ee8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:54e902c31093ecc4585cc51a2a9e3e152adc9da23529fcd2d210cbf3b9f77cfe
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:d7622f98296e0984ac51cfd1b70dfc25cfcf7a9b09c0bb01e7ac2d2359f64339
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:97c7d4361a6e875ad014cc51d0b893cb1aa0a15a31781bc6130623f275e4cbcd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:45c6dc6eba25e0971f7cff26dfe27d648cf7328866eedf658e8557d7e8694994
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:ede502e36636cde8efcf1689eb070203874476be85e8224cdd76efc54e9a8d3e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:551ebe9fceb6dc9a98602dcf39d7557c8a8c5a52e3d7b4f078994c10fd9575da
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:5abde919e2316d7549c933fa8277df3fa2a084eed584097c38facef940f263f3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:52ce130cc7f92214bbd18406f92ad3603f37b618615cba3dada7868c17f2674c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:e8f3e0b166c094fdf0ef3600da9f62bda9c69c88a80d867cc9e32d99cd667e37
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:5b528d3bd6850fcd2e7e21f29d6c9b1d405c51c49e9ef625c85248d7e8848494
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:ec1a7f24490e50288ceba4e5e3f93f9dbdbf6ccb3f04b79f048adb6030d99327
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:b63adc6dc60c47e713e40bd3b5d5c6a98068fc3eb7a53b645389a2e2c465f793
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:595af729ef162aa48ddfea58efed05d9f17aa9f277a1b9df0133496f71934b75
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:9cae4240f5a4c9d628f1abadbb78ac31bf580ccc787d75c48e3eb57d31d7c567
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:7cec48e69dc664b8bbe17aeacbc25c76d4fbde7ed4298b2e0e5ed76bca89df92
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:83cc89a14e79d95b4787cf34bded45595b7b070759af1c433962c26f55e70071