dhi.io/cdi-controller
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.66-debian-fips-dev, 1.66-debian13-fips-dev, 1.66-fips-dev, 1.66.1-debian-fips-dev, 1.66.1-debian13-fips-dev, 1.66.1-fips-dev
sha256:39b133dd63d71d45091b853cbb8a46a7f67e5739b1d97e646c709836135dea7d
Manifest digest:sha256:a8b95e4731423837b08e255c2926adbf3d2b2ce433c3cc1b99e8c5fdea5db904
Size
54.86 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cdi-controller:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cdi-controller:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cdi-controller@sha256:5019a08e2f776693c9010963298e64a82188a3468e3bb5492d552f4171348e4a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cdi-controller@sha256:90a39418a1a14bb5b9b4188432c81887cc8be5e6314dd38211886763a1829c1b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cdi-controller@sha256:9e8a55ed1edd7789427d1020260c064ccd42866c79a360506635b10e727728ae |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cdi-controller@sha256:2c4c3d4d46e72a0be3098ca8c2dc294f420f0beb15186d453a5dab0dbdaca17f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cdi-controller@sha256:7fe9af5cfe448d5424baf1165e46582a35972fe0513dfc13d67ee532afac88b5 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cdi-controller@sha256:2af197d294d05e41c24cf202f4731ac9769ef3283ac9cf14c02906e8270c1288 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cdi-controller@sha256:3c60a8d18fce654bd6aa09f08820f12c8d3c7204155edb9df726a0821b040650 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cdi-controller@sha256:27086a0f0e14c43d90bfca504830ffbe3b3b509795c94a0b46553f90c89ed4c4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cdi-controller@sha256:ae2f43bb7150c917a8cfe358b611eba39f77e70f24869a645839c4a7d4394032 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cdi-controller@sha256:caa17a478a753bebb516fea166fd76fb036e2c802f08c31a4d438f3b6cd5b9f9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cdi-controller@sha256:4601a772b1bfc160f647698f86d5cab29109167a4377aba1613d2b3565adc782 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cdi-controller@sha256:3cfdd16d1f794aa93f22bfe2aac864b9f0bf62efb48560639f2cc34bd09614a8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cdi-controller@sha256:369d96b77e20dadad6995463930d3c89ff79855345418960fc5483ac8ca65772 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cdi-controller@sha256:95f0ad578684ea4594882812c48999b30fc0a6c89460ba872a3e22780a4e86dc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cdi-controller@sha256:bd0b7c67e2cc0cd9d17044720843417eb109012c6515224611c397c389e80176 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cdi-controller@sha256:58a0672e6408c9b6b4176a8caf1c6d784f67f37e9672dea3f488908114fc62f8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cdi-controller@sha256:99a899db5e48db6261b6c28a2f7c69f792bfb87fd67c517bafe95ac6ee3de037 |