Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.0-debian-fips-dev, 1.10.0-debian13-fips-dev, 1.10.0-fips-dev

Index digest:

sha256:cb8a262db651fd9856e0efb7d530ede4ad93ff8ce7e90fc50e5c77ded6ee6d13

Manifest digest:

sha256:c578f72ae79ef8e09875dba44a4b6a917f0d540e2d341d027e580fe2f8c6b8f6

Size

69.79 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:3dbf4deb89a4020ee6b9ca9fc37d9341af730d8b4be47145dcf15cb7eb3f4196
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:72899e971dd890d807691cfdebd7221f9f700e9cd5fe047fa97f017a04f4c8d8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:2658daadb1833bb468134bd112ea219be6de84f154072997cdc02b29c78138e9
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:62ccf06aef112efb8bf6e9bc297b5e8cd4997ccec2d3fb379f74f72e88238e95
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:0c09a5f96096258bd7fd63f253dfc130b942cccb1f42acba8cc44f42ec0e1958
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:5f78dc88acb03c92e9ab8473f80634d7fcb70a32d4e56be762b6f947132627e9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:4ee1acf9a55d928b1fc419a589b79692ba9b1dffee99bf8e968279a23372eeb2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:7b67d27e9b278b6dde70879d56953a72493c06a596beab3697ec667d85064ca6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:d53fb6b8b47793907bf995010d12e59bb3958cebf9a8b73cbc0a8a59b1bbf462
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:7909d9c6663260c3622588c4ab415a70799e9b36a2d723894d10c91f90f1c220
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:bb7e8f1df5bc342ab499559227b8cc0496733a799a2f9a593fece52478c7c282
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:94321711063a9111169c003de0bc45f65b3c4fdcaf042dff17e58ab4ce3d1d90
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:71c06f2747c472a1416f9f6ccc81999f89f73eb25909b65c5530e7391e2d62b8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:90098c8d262155b3f6514f71cb4bcf120541723721ca06b2f05a7176907a62bf
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:69e699ceb9412a3e3e60d135958e9f7f25e4f75fea66b876e8f6fece95616706
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:c63f2a0fa550f1288bf8e95a9308af7960c982a2d28ddd509a09395932d8e645
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:6168299d2a29d151133068110b6f5985c4a5136a4123baab2ba767599c069462