dhi.io/cert-exporter
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.19-debian-fips-dev, 2.19-debian13-fips-dev, 2.19-fips-dev, 2.19.0-debian-fips-dev, 2.19.0-debian13-fips-dev, 2.19.0-fips-dev
sha256:43f33b9a78b55af219d6391349a20a6bfe6a64ef4f5eaefc21d6c3745bb052a9
Manifest digest:sha256:a77cfebe87a5930df124952883a9553971e25416e12c9521f0b9c8d84c4972f5
Size
46.72 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cert-exporter:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cert-exporter:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cert-exporter@sha256:f6e1c509c27fa81e489d36656a1436f34856e6c012cb98da353da77c3359eb24 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cert-exporter@sha256:9dd366772cd20466dd7e95e15d5fa67a9eef446ad7f044112f98b7b49c0ee1d4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cert-exporter@sha256:f95fdbc9d0895027b012ff87fac6c59c0aae44615a34f9b7d81b71ddec3dbd42 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cert-exporter@sha256:ae0b6984fa49707cdf39bf049f783791b837d860287d3a1ba97defc74d166636 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cert-exporter@sha256:f313e42110a97580568ff1cb3b656139a8d4e80b0097bbf24ac20de1689ab712 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cert-exporter@sha256:d7c44181d746c328a3a70ec1e911acf04dbab588f4a1bd1b15dd32d0e192e955 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cert-exporter@sha256:2a1511b7a3529567618406bd0bd8cd5c20226c108ecac38056a3bfea78004854 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cert-exporter@sha256:dafa0eb693fb569ad86f10923f5f0039062e95b9424c34a88a9ba94fa95c459c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cert-exporter@sha256:361a78ea38beb361aad2c7242f96f0a6d4c918cbef8e2635ee411a20e7349fd4 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cert-exporter@sha256:72f7a52e9997dd37833d01a82b5a272f790ddd684e3d20a414e9f687a5faaf7d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cert-exporter@sha256:0ccaa0a0955754b7cd8476990b742c98497bbfc009f6b3ede0ce50a4ead1c928 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cert-exporter@sha256:8e7b5fe8213d126a4466d0889d988ae46a82f825fd8d8e086b4daa47c68f1ee2 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cert-exporter@sha256:c8e91d8e88bea3c7e5b880227839a4835248c47f02a0b8e285c40ac702d12140 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cert-exporter@sha256:fe11a8c07db9dd4422c53c33d8e5a2df20b7ca0d64ac399299d5189686c26cb9 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cert-exporter@sha256:a7c8b9c9cd8d16e1ed8d4284b340c4cfdf02775268497fda111880bfdc6a7605 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cert-exporter@sha256:08b951d0246676346dfe199ede30e419b53a2b9dedb9161a96d648c0e0a16b78 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cert-exporter@sha256:3e405d760d11730d00d3ddeada87032b4166065716732aa8356f57e85058de83 |