Sign inSign up
Dapr Injector

dhi.io/dapr-injector

dapr injector 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.7-debian-fips-dev, 1.18.7-debian13-fips-dev, 1.18.7-fips-dev

Index digest:

sha256:07f01ceb89598fbd7b247372a72f7d8339e6e2359827dc86f3408a220d00c8cb

Manifest digest:

sha256:6de6ba05440895c60567b4089632db9b07f93998398bb74ded8ef9f711cf863a

Size

51.21 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-injector:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-injector:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-injector@sha256:abf5d2282c068dfdaadebb7a738628b0d2452875df53eb631b01e252b6f7c4a7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-injector@sha256:b7aeff22cff278edb4a11a70a31a25b0bd619773da0d411cbe5d4320a39348f9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-injector@sha256:97b8e4f2e4d35b98be7d1f66d1f16322b8cf3c02ddb85a2ddf264c520c4fa54b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-injector@sha256:e1ce2312dabb96aef2eb0203ca4441e1e533239812930da395c72590a0413a61
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-injector@sha256:093cf3128419a1384040ae05f4124676102ba4791e1be4a65fc0e72d22a9327d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-injector@sha256:1e3f12238e23c9196315207ea44aba60610458412d1506b1447289aa43add780
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-injector@sha256:7352f923fd1249ec7cb2fed204085ebb31417b600c1e5524c25bc1792ea2bc2b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-injector@sha256:149434282cb3beffb73e578a5dbd980da66249004b4d961035a5fa2ff9851943
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-injector@sha256:75960299e611a51095b17780387f92e82d6ef0340247517ac84a9c81df720cf0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-injector@sha256:5398cb1b68dc065708913cab3e7c46f2c05b0170165fb053e0bcb607d8dc4e55
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-injector@sha256:0b4d6795df7d381555998bc189d74afbe43ce8e08f488ff2272916588139286f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-injector@sha256:33985d6c888992eb1ed38d7054bb004806e9cfdb363a07b2e9a2f4fbe90995c8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-injector@sha256:4efefab0ca1ebbcd5de82311bf6b3682b17bbc3ffc324c2e21b24d6a87da5333
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-injector@sha256:cca47464f5eecc32b305aaa7b75ec6b3e0ff778e1f6f684511f2b799bf9c581a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-injector@sha256:4ab11852853ee37c1f8a4a48323214acb3ff963955676f16c8d043fbd908af09
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-injector@sha256:50aad78ced9fa29175a2718bd2eaeae2047814badba3059ab5d7ddcbe99bbae0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-injector@sha256:b679c3fbec09035798090b81c3b11419b696d31e3618f94a9139e6735b15903a