dhi.io/datadog-operator
1-debian-fips, 1-debian13-fips, 1-fips, 1.31-debian-fips, 1.31-debian13-fips, 1.31-fips, 1.31.0-debian-fips, 1.31.0-debian13-fips, 1.31.0-fips
sha256:5e60d6e0695be0f3e1edf8680d7af82665b5b122c9425d961bb1720ecee4d48c
Manifest digest:sha256:8b547674c280602c72e9b6cd84d8ff2e4f114d9db02a904ff7954ab6eb43c666
Size
41.86 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:46c98f16739cfef17dd7f839d99f6ea8fcd450be503a213cd87935a734d95822 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:6e60667f9cabff559f961685e148d4f3c4f2d75a2d1e03809b6a646ce2d759fb |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:7349ebb03d8ad5a4db389b534c966cd19486d52cdfb496a851bca20da716fc1a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:93c83fb0a551c31655b8b5832cc6304e88432a7f81042310434505e31d1b5e9a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:915f85920b79c4aae1d6eb03b8e3331c8bc6c70a14a3b13b08d969e51c33ed28 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:b67cdd1aaff13b76528b9f8f7d260651b756a589dc54017a67f1a126f032a4a3 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:51173848f91d910bccb1447672af894bbf3a2e52303e56dc26488a9cafed63fe |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:17c92474acfd7071a5a75badba097bd334cd1fb2e2f423d1352d50f16423da35 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:680384b601da2d4aba003072c9da49c51dd39c9a03bae9f6ce7d002cbffde7ff |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:417e0938aaee54af11aaa5d8d7b8e5dfd3405918b4084cdf8daa6fc519fd2b45 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:c74e9be5a1799b471e3fe937a2cbf42cf32518ab7d6066cc79a14088db592921 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:396bb99388a4955b88a419503bdd37fc2879c49b5a37320f69fb2d429e04a411 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:fc9eb633f2a81a5322ab680f92c4b5f96450cca6f421f9c66ab116d022ebcba2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:6388268b17a329eea1cd7a8616db2fa764fa314cfd2586e5909ba8d1bd3a6b65 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:6e48ca5000c81cf0dd793bac2b50477e5a08068639095851a0af66d1b471e8e4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:fe0500256e022460af73a3af2ddad0d568b3382399938d3f346a62c67196aeed |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:901050fa031e8fd44593fd88d1744007a6e104b32fecb3fffde12d370bce830f |