Sign inSign up
Dapr Scheduler

dhi.io/dapr-scheduler

Dapr Scheduler 1.18.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.18-debian-fips-dev, 1.18-debian13-fips-dev, 1.18-fips-dev, 1.18.5-debian-fips-dev, 1.18.5-debian13-fips-dev, 1.18.5-fips-dev

Index digest:

sha256:423f21744a057a52ac9881e7c04848c98ca9de6e25a5b97efa29f794a5c196a4

Manifest digest:

sha256:39247565d3e46f872a1311ac7eab28b4f828ae61cc102170113d1a2db2d1bb43

Size

56.00 MB

Last pushed

12 hours ago

Vulnerabilities

2
8
0
1
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/dapr-scheduler:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/dapr-scheduler:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/dapr-scheduler@sha256:a50dac91e7ea36b234028a4eb3da913093823c95ff9665a787742c2cf6a51e4d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/dapr-scheduler@sha256:219503d444ff167da19a3df0a4717bb8ec87cb09047424c0a14d69ee938b2950
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/dapr-scheduler@sha256:86ecf37ace34a3584f82e2b94f16082540f383fe30b87811502bffdf6eedd8ec
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/dapr-scheduler@sha256:2ddd1682f36bda8dbae630a166116f7447794c57793d818594525e82b42e09e2
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/dapr-scheduler@sha256:bc65335457eeb3aa43c6b6405c9b86cf09bebe2adfaeeabb52771b748b165190
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/dapr-scheduler@sha256:9498bee6fb402e89f96fb1f6ff5666390baa6a531f5992867c0c928dc44d07d2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/dapr-scheduler@sha256:0de753a0504c43114a70e67cb2a68aa2b4b88743f356fe883ef49ca3a4d07f07
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/dapr-scheduler@sha256:0254672473464ec02ab499956719476a9999a360d2351fe10ae2b4ebcb549abf
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/dapr-scheduler@sha256:0aca020f6af472d08d3d7a306d4a7ebcd719c1e1cd7cdd0ee425ce92c3771669
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/dapr-scheduler@sha256:47650257e49de3bd115f4de2550846dc798157440a302d95ad8c8fb5d143d986
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/dapr-scheduler@sha256:45dacb480d0f7a93c105b921b2346160b3bb24745d8609ccca408c860eb7826f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/dapr-scheduler@sha256:5d08beae57faa0570232967e2e62a37e68245f5c8a2f345b1c15d0e9c774f3e7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/dapr-scheduler@sha256:e6970a75a398dfc5e2d4bb7ae3bd8dadff2283e53565a73ed7e766e4c090a174
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/dapr-scheduler@sha256:57df26a1871fecf87621628ba56bfda375e8a42a6fc19a0cb4dbf8d649d5c70e
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/dapr-scheduler@sha256:c4600b049210762d03d6dfa5d491009f0d629e605858c43bc615f2a7ec753c22
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/dapr-scheduler@sha256:a16cf1cb51b41fa66bbdf399fe611b3b705281bf54e94ee74b11ee5617d16f4b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/dapr-scheduler@sha256:604864e424ba9ef78396223a5954c65f303d9e2ee38b43e693c3981e68efa76a