dhi.io/dapr-injector
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.7-debian-fips-dev, 1.18.7-debian13-fips-dev, 1.18.7-fips-dev
sha256:07f01ceb89598fbd7b247372a72f7d8339e6e2359827dc86f3408a220d00c8cb
Manifest digest:sha256:6de6ba05440895c60567b4089632db9b07f93998398bb74ded8ef9f711cf863a
Size
51.21 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/dapr-injector@sha256:abf5d2282c068dfdaadebb7a738628b0d2452875df53eb631b01e252b6f7c4a7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/dapr-injector@sha256:b7aeff22cff278edb4a11a70a31a25b0bd619773da0d411cbe5d4320a39348f9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/dapr-injector@sha256:97b8e4f2e4d35b98be7d1f66d1f16322b8cf3c02ddb85a2ddf264c520c4fa54b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/dapr-injector@sha256:e1ce2312dabb96aef2eb0203ca4441e1e533239812930da395c72590a0413a61 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/dapr-injector@sha256:093cf3128419a1384040ae05f4124676102ba4791e1be4a65fc0e72d22a9327d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/dapr-injector@sha256:1e3f12238e23c9196315207ea44aba60610458412d1506b1447289aa43add780 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/dapr-injector@sha256:7352f923fd1249ec7cb2fed204085ebb31417b600c1e5524c25bc1792ea2bc2b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/dapr-injector@sha256:149434282cb3beffb73e578a5dbd980da66249004b4d961035a5fa2ff9851943 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/dapr-injector@sha256:75960299e611a51095b17780387f92e82d6ef0340247517ac84a9c81df720cf0 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/dapr-injector@sha256:5398cb1b68dc065708913cab3e7c46f2c05b0170165fb053e0bcb607d8dc4e55 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/dapr-injector@sha256:0b4d6795df7d381555998bc189d74afbe43ce8e08f488ff2272916588139286f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/dapr-injector@sha256:33985d6c888992eb1ed38d7054bb004806e9cfdb363a07b2e9a2f4fbe90995c8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/dapr-injector@sha256:4efefab0ca1ebbcd5de82311bf6b3682b17bbc3ffc324c2e21b24d6a87da5333 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/dapr-injector@sha256:cca47464f5eecc32b305aaa7b75ec6b3e0ff778e1f6f684511f2b799bf9c581a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/dapr-injector@sha256:4ab11852853ee37c1f8a4a48323214acb3ff963955676f16c8d043fbd908af09 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/dapr-injector@sha256:50aad78ced9fa29175a2718bd2eaeae2047814badba3059ab5d7ddcbe99bbae0 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/dapr-injector@sha256:b679c3fbec09035798090b81c3b11419b696d31e3618f94a9139e6735b15903a |