Sign inSign up
Dapr Injector

dhi.io/dapr-injector

dapr injector 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.5-debian-fips-dev, 1.18.5-debian13-fips-dev, 1.18.5-fips-dev

Index digest:

sha256:37a14cfd139ee6e0e714e71693f7c14a25c0870dcd0937c2fa98e18dce7b477d

Manifest digest:

sha256:215153bab763126ea00a2e7583333e9b335c0bc1c3b234029bf71ed0a32ee7d4

Size

51.22 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-injector@sha256:03768e3d924e2a338d5d88b4efca4e1f002e84bf0a6398843ad99af546d24a32
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-injector@sha256:ccf1ce85c33aaf12b326a54acb68786ec105df0a5846c3cb25251d8130b8651f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-injector@sha256:a73c06ceee7fa3701d794140070c9e10f415b0b1d8ceaaf98661bf4c35dc3d98
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-injector@sha256:9ef32583c10ef94fb8e368b4dd941f748c1d889b8e79c778375ffdd08d640db3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-injector@sha256:edd35cb40e9f6a4884225cee8cd53684c93e3b100b9805bed1c60c3c1a39facf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-injector@sha256:749e4c8b93be662639756d605873eb291751cf66c25b927772117370003daf2f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-injector@sha256:49894a2b8f9f7861ae07d34b52e178e7607a028482880a8d9902faa053c81f59
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-injector@sha256:6b95bb126b2282fc920b2b0de99dfb988f0f5bcceb81ff9164f633dca9052640
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-injector@sha256:e416f3bdf1d183d6eb8f642d167f24041f6f06a3ab1cf5182d058a11c309effb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-injector@sha256:fa5c43344dd1031449a940effe4e6a176fcdbc27ea3fc5dc16ec0ff9e3b0db24
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-injector@sha256:9944da8070acfd82912418c4d45ea5a56f8956ef68008000a2a5828976fa5744
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-injector@sha256:5c38a45a40f29df4e2521698232573d6860af257a2699fd2bf024a3bbc413cf3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-injector@sha256:ea17f74510f4076ec06483e299c9181a656ede3f9f0b1deeaf10020c4521c21d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-injector@sha256:23fc3706733d380b463358a21c05d0907ce60909cec56cf53a098ba8b95cf3d3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-injector@sha256:e645fdcbbf9aeb39729b4458ca128a9630f6272092f7d084f86bb2bf395e0ac7
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-injector@sha256:04266e7172f6d76bb77a3c235d33b2d72fbc82573bae4fa93c89d0157dae7faf
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-injector@sha256:8914793ad9e9102843aa5eccd68478174e09bea8b22eb288d0deec78006e790d