Sign inSign up
Cert-manager-webhook

dhi.io/cert-manager-webhook

cert-manager webhook 1.21.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.21-debian-fips, 1.21-debian13-fips, 1.21-fips, 1.21.2-debian-fips, 1.21.2-debian13-fips, 1.21.2-fips

Index digest:

sha256:6082133d44472d2cb4d6a0de141f97d39d43a922c2c371ee6cf6d10e05fdd591

Manifest digest:

sha256:06bb18d4041fe962abc53a8864674e8852a1ad4663841812e6aff53b67f8a9c7

Size

24.75 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cert-manager-webhook:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cert-manager-webhook:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cert-manager-webhook@sha256:01dc917dbd5ade9cfd725ebe5c82b4e1744c5b38118ddfec73dbfd7d9e432bd8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cert-manager-webhook@sha256:70af7d8ff5b1e7b1159138abdff8ebd696bfed4be8e6c3cd0b3b91ea6926df56
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cert-manager-webhook@sha256:bea4b0d01c6a7c5e778c908e2d8893d4985d133da08506a036312750c1a7584a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cert-manager-webhook@sha256:fd794cb3c68b09737e81fe80145b011b36be030b550c20ac1abfb21dab71874e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cert-manager-webhook@sha256:f2be2a1ff3725885c0a45d15c24846f402078c49f0167633c792fd3caca77e6b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cert-manager-webhook@sha256:76e2f0d3360f108425fd92278473582aba38f24a85196b137803b0fe01598bf1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cert-manager-webhook@sha256:c9ca1b2bb55831a68ec97709fd9246237289f9d7c06174307cfcce5c43188849
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cert-manager-webhook@sha256:d4b9abbcb73cde273c6085910de5a574bb2056e4030aec716647f8410c4d25ec
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cert-manager-webhook@sha256:3058c643264b818f075588c01e07e17788a882a35dc420603cdffc7584269caf
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cert-manager-webhook@sha256:f59179279b950348931774bd19c97869f7a0ec7118cfc7c740c63ae36ec4f0da
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cert-manager-webhook@sha256:5a29668131005472e4656fc8884fa322edbb36a58db4d0ecc542d1ba6133fd14
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cert-manager-webhook@sha256:774d16e16c6e5ce4569d18696c41c366bffde9eb23c108df30a7409cb009fa70
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cert-manager-webhook@sha256:a81e74b16719f1c09b8b0b61d3e8f4cd231758d7c2034324821179b0567a77df
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cert-manager-webhook@sha256:af94cfd40f116594d8341b6ff095974ad0be9e83d3edd42f7b82854b98bad8a9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cert-manager-webhook@sha256:5633aee4f773a2129ff1204e1bd9d37796025214a1845a89fce1956417454827
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cert-manager-webhook@sha256:e24f63f39cca4e939e3d2cfe2e4eb4cbcdc0fc753f15a222da3c2ab23412a55c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cert-manager-webhook@sha256:fb24c388210e4b73fd3364c37ebb43f96f9f24663bcb7e422a03377ce44d8153