Sign inSign up
Prometheus Blackbox Exporter

dhi.io/blackbox-exporter

Prometheus Blackbox Exporter 0.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

0-alpine-fips, 0-alpine3.24-fips, 0.29-alpine-fips, 0.29-alpine3.24-fips, 0.29.0-alpine-fips, 0.29.0-alpine3.24-fips

Index digest:

sha256:18506bed27e5fe520c2f8b4eb54ac0e711b43bfea0263e5b69f5930403a60b5d

Manifest digest:

sha256:bf0f9d02489e4fb25d70ae89a56c63aaff5c96e2cd71c6568b0b7b8b18432b05

Size

11.67 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/blackbox-exporter:0-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/blackbox-exporter:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/blackbox-exporter@sha256:f1dec8db72db99cfc9c7537247b67722a6f47210f4fd77d48126dfecc0ae397e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/blackbox-exporter@sha256:a8178370a7f6a2bc3b0779d7f69b9d91905aa74502019eea8efd5ec212373908
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/blackbox-exporter@sha256:e8276567fa9ca7c6c9456471f25766c44b555989a32e4799d6eb9b1b022a4503
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/blackbox-exporter@sha256:363e58fb1486393fc9efc413aa70f0a888befd5de6e00da7d4be5d56537a9375
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/blackbox-exporter@sha256:fa07c8331aa88dc8fb9f81d35e79e365b53e66178872ea2d8661b36a9d43d7d8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/blackbox-exporter@sha256:db222d5a89dd1e6c5fc4e3e0c24adc5a86617b6b5e1064a0019fbc9b39b19505
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/blackbox-exporter@sha256:a5d4c1c8fd653ab191de1b015fd6fff1117eeaf60b2605773c0d7aa2d8ed14bb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/blackbox-exporter@sha256:03597e04e605b35cc1b3d432cfdd88cd3815840d2217d842bed3a0026574b0f6
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/blackbox-exporter@sha256:44f194cc825e7017e92687e220ab68d2be3f43cda2ec4c3f7a22a11891e472cd
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/blackbox-exporter@sha256:863562bc81fa1cbf2b44a7258853feae6f968226b4f4ce69c14258d4527118b0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/blackbox-exporter@sha256:4c0dfd44ba7600063f273c9ab4d7002f5b3e972a133c8b40bfb9fb03924f4d62
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/blackbox-exporter@sha256:bd0d08f18f747028e36b343a6fcf680c57d58604a145a9995456076710bb54f4
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/blackbox-exporter@sha256:5e2ebf7c3663051facb8332660afa00da092b663a439d6c6adb7e4a6d8d29f3d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/blackbox-exporter@sha256:ff70173bbe0f654d306c8de3c3d4e022dcfc05f6a570e111bcddd26dd4bf4eac
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/blackbox-exporter@sha256:6e4885e1ef6bf611a2679854ae29672ebb6c6175e4cad957f92f9b6c22a004b6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/blackbox-exporter@sha256:a9094e950e42dd0f93695f7473303d08d50fb031a66a30f903d0dbd60ad7661a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/blackbox-exporter@sha256:8671b86fb43507100baf5b7b9a77be04c56f6845035e23e74f2d87971a89668d