Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.0-debian-fips-dev, 1.10.0-debian13-fips-dev, 1.10.0-fips-dev

Index digest:

sha256:6f7b340871389373d38fc786ba0422943f977c1e649d015c4a2eaaf089dddc33

Manifest digest:

sha256:e1f81255531e5b2f5dda5ed0868ab312ba7196f5e0bf3ab339747821c4cbf678

Size

69.77 MB

Last pushed

18 hours ago

Vulnerabilities

0
0
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:22384ca46c8b8c242137a9a00ca4d4849f43bb36117db2910ab556daa5c90af6
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:38c777db9bb5ead8c244c635fc63a1a1e853f0e0358559513af3ad4244e879e1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:2083732fdb447fd1d77158b790ba88b41ab87e8f5e89bb2233b5d1ff65e4445e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:20163e34066744566922dbc4174229b2b37be44a07b4473a84c903dd533246a7
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:fd04289aa7e99b20752fd812f005842a88c669f87f5436818bc90a2976c43878
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:4c82c80768bdb3f2951dac95729a9b7b4bacdf64df0411928ed4e8f9caa516e9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:f0e97054b26ea9974862317740c57a5c81921cfd98566c9bd774a80d0d44a06e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:79c0618dd38584961503170656b55028f686acd47c6100aba682eb8f963aeb70
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:9deaff464e3177234c5f6150a52fa57c691da6589a35f80232c8e271a84ae8c0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:baeee092142ecb9282f489080e0b76d7eba5b16c112e7b7563552a5ec13dbf3c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:b90e7d24fbc39bf5380d2901b75bb16115c20cda626e5b2500ba36e418283716
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:1aaeeb48d1cf04dea285f1c1cc16349f1404366b608cbf9560a38e261d18b155
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:0b1851b180008f557c69eded757f600fbc4093815c2bdd6b0cc4e0cb8872ea27
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:63f251c1504cdae5b8ca0f6ce27e1d25a6dd8fbc2d3b76f205330766dfa748d7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:08ce16749c3e8b7bc49cf59723380760df0efdfefe348244424fc3a2adbd6de1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:8c1d19d3178019a073affe2568d04ce8e2262dc9344f7a0c5ac64205c8cb8883
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:57b70b587308e0ba35176d66d491d42b25e78578dc7e473dcf335c5e64090857