Sign inSign up
Cassandra Reaper

dhi.io/cassandra-reaper

Cassandra Reaper 4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips, 4-debian13-fips, 4-fips, 4.2-debian-fips, 4.2-debian13-fips, 4.2-fips, 4.2.7-debian-fips, 4.2.7-debian13-fips, 4.2.7-fips

Index digest:

sha256:24201ec515229c0cb80291b291588e8ef8f5f1321b57d2a7b00f6719d960187a

Manifest digest:

sha256:307dea61da41125cb8f5564fb3eda6224383d7e3b7698baa3cbcdfd69c60c075

Size

152.76 MB

Last pushed

10 hours ago

Vulnerabilities

0
2
6
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cassandra-reaper:4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cassandra-reaper:4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cassandra-reaper@sha256:e71b0f7fe0c73a1ff52aa27afcb0a828a46bc5c8269bed996e0cbcc289d7a573
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cassandra-reaper@sha256:a192053cd39aa3c9bda31fc39a432316dcd698c82f33e721d2ceb5e0ea5d4e89
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cassandra-reaper@sha256:4cb4bf2a506df51b3e53d74299c3c3b51ff8a416b7fcc55501407c61f7e18595
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cassandra-reaper@sha256:7ceada5b48dde0bdcb326290f5fa029adf3a2599e9377438913ddba82e85d88a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cassandra-reaper@sha256:42ffccaa3daf3d67848eac891b9c943f3707a2d35f93e4c0f2c33da4a6a3977d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cassandra-reaper@sha256:195db6c1502ce51b3a32eedac16cc3754caa0b09ac9a660f03763178f2177f8c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cassandra-reaper@sha256:8a18f1e3c5e9361551176284ea261ff968ac8ce13c8a34b45895227f37466d25
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cassandra-reaper@sha256:a8ca75f3ff750468d9c4eeb3ceba2f83dbd1d2f9540b8d86f2b1f8a16bd8a292
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cassandra-reaper@sha256:29e94312f130c8fe4eb6fa8430207112ad52e1abd4656eed17d16a01e990e8cc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cassandra-reaper@sha256:de39aa6858f278f8837813f22c425983a5b65c955e94ef61a9b18cb84cfc5cd9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cassandra-reaper@sha256:7ae9f266a0820cc1d9e14d8a0b9f4d6295c0c4a37710bb715fc98958bbed22b8
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cassandra-reaper@sha256:3fb3be9fefc026a7e65612fe48b4fce4d068242780d3b2152ac7b067a9a19909
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cassandra-reaper@sha256:d8ad832bc99ff007fb5d4f4c23355d5911a1eeb1c01e9e456c69ca237a7b2599
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cassandra-reaper@sha256:f78e4d89be7cb4231541fab5f06a5df12c798e6f009d478a5a1f8c6386dbd34a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cassandra-reaper@sha256:9cb3b3414841af5c5a78c9ae747517de65cd0c298c2db4073e9a7bc782e0dda5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cassandra-reaper@sha256:8092a815b1acbc7168f58cf57f057dc653e95e4ccd0e5a4bb2f9d59a3cfe2e92
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cassandra-reaper@sha256:cfda400ea53744160c524fde21e6d90068094c74c99fb84149d7565e2855f91c