dhi.io/csi-snapshotter
8-debian-fips-dev, 8-debian13-fips-dev, 8-fips-dev, 8.7-debian-fips-dev, 8.7-debian13-fips-dev, 8.7-fips-dev, 8.7.0-debian-fips-dev, 8.7.0-debian13-fips-dev, 8.7.0-fips-dev
sha256:afd9b7209afba6a3a56a5fdc31c60d2e91e9c4c6448b34420af2fea5c9c4a601
Manifest digest:sha256:9ab675e329c70b9eeef37a66879a5624f75484b85868d53eb3d59d11d1d7fd5c
Size
58.59 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/csi-snapshotter:8-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/csi-snapshotter:8-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/csi-snapshotter@sha256:f05cdf50810225a3b8fb989311409b1922d28a60bcd8b2a25678c70eba5b6687 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/csi-snapshotter@sha256:ff3760caf48bc5bfcf1770c951b7ddfd8fbf7471f6cc67529f1dc21b2ee5b56a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/csi-snapshotter@sha256:97b31b97c01b71d549889e3cbb2cc22cebaea5b457e458405eeae1d80a3abfa5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/csi-snapshotter@sha256:1c1e19ffef08abb910ecff26da26d5095cde3861d14471566236b63b4ae2cdb7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/csi-snapshotter@sha256:1f9fed892d7a39dc90f295b94dfe704e40609b9fe987f423889ef3f3d65a3180 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/csi-snapshotter@sha256:44f100857c7cc736c0437ac89b8cd0894c383ee4a1defa0f9fb3e57c77378a28 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/csi-snapshotter@sha256:2c40f9985b94983c04695b14bda21168e92ff0ee794d060bf5815fd9b93dbc68 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/csi-snapshotter@sha256:ad0afdf124ea3763c4087e70d61346e733e2bd7e3964ced1a804023078437846 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/csi-snapshotter@sha256:b9669c9908ecc0547c26181c740dcc4799c7ee5e6f61903a026a009a893d01ba |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/csi-snapshotter@sha256:27980a8904ecd2fb870e47a0b89ccdf20e9209068e172cd41df24dc8be694742 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/csi-snapshotter@sha256:ee7bbf09d9025f6b2dc23651ee56a9047a717ca645c998b7c6214973c6ec7d87 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/csi-snapshotter@sha256:522368b8a11edb40a2f4542d8fc19737f149211edd36329e53a8ee6213d1eacd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/csi-snapshotter@sha256:fca018a48fad71f106ab93b94401abfd599830eb86934a212c5171677bf98a01 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/csi-snapshotter@sha256:fc7c457f04c41d9d5f53c35acd54bf3c65b015b6f6fd664bb1ab2adc1ae8fb3b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/csi-snapshotter@sha256:e839bdc88e700908b941877a6625d18e489ecaf290753acfd26f21a1d86bb999 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/csi-snapshotter@sha256:621d6df394cccfe1ab5254e013320a824d7817b561fb5ee47ae59e0ace381a2f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/csi-snapshotter@sha256:7fecd7acff7add6ecb06761e87856aaae9d966b50904414d01cf7b5c54a83baf |