Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.1-debian-fips-dev, 1.10.1-debian13-fips-dev, 1.10.1-fips-dev

Index digest:

sha256:3baadab30216a77cb3435812edf2bf76c62aea41e90b5799e44b46139fdc98ed

Manifest digest:

sha256:9b8d1a4d064aa8e9a77f1cbc2bfc5f6c167530eecbfe28b7c32df8655f0661a0

Size

69.79 MB

Last pushed

19 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:2207c8d46f770ed1197fb9567c163cfe3b34ec32acd6b9e0a651a68c867f4031
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:2c180870915c440fb1289264cc86a0723fd8f16babbf07805669f2f910fc23cf
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:23ca304a56a9421a6dd9a039e5deac9fd7122c348b3c46461b1a59e3cfc54372
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:b54ea252a3faa9176d8617ede32e8b0ae42369f80b70d3694bf0acb2e3a208fb
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:4d60b847a0d11e917dc08980cf10b07e7db79607c46ed91e037c61e82c36ca07
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:3b9317102a60729922e2435a287ac0ad315bc9bf445661ec56b62951752f3708
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:d6a2718cab31c36873a87c4920db24fe349347b1d86bc5bd9873e4e018b01a63
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:66dd44e85543df27de8c6e8611b66318be018b757447fb571a9ab290c7de2cf0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:a968303248d93f8ddbb2b16ddee5c653c74fb6d07d2e297ccbc56ba728979e80
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:ffe57a42868bd39805ddfd6023c33fd6dd873015d8574a34b2ef09cca4111bf6
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:6a2d7adec3f0fad37b807ded35fc018b22e195d6f2b612bd0e516867cf413cbe
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:1d070ce3b1e147baa568c8a1d1c2b0da13930f527a51086e7c496ba5c4d309da
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:1cea3a4b92e2838fe100d48443de8dd60b939eed7e73374b3720a31eafc86a64
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:52291ebda0bd31d18de9b683401117af6adcbc11f4d1d7c6e8043e95700b2cf7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:b667ab328403a5aa3951fb70803beaa2ce88ebdb4c568d7d3b4a26ab0d89872b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:1a3574549f860ed7d0f890bc7649384a054972de61f03c124838b6a08cbdd63e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:68e70672bf39947ff4ac1ff4a1d5ccb3b97090285120d6f5789909172d21c6f2