Sign inSign up
Helm Controller

dhi.io/fluxcd-helm-controller

fluxcd helm controller 1.4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.4-debian-fips, 1.4-debian13-fips, 1.4-fips, 1.4.5-debian-fips, 1.4.5-debian13-fips, 1.4.5-fips

Index digest:

sha256:5759ed792fd102339f1c67f16d8caa792d89b41532951217b826df53caa1f1ba

Manifest digest:

sha256:9d2df0ec54cba78932387693b60358779fd4f9065bdc95fd3e818e47fcbe94a2

Size

29.01 MB

Last pushed

18 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/fluxcd-helm-controller:1.4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/fluxcd-helm-controller:1.4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/fluxcd-helm-controller@sha256:b79b057663e4bd936ed87e659fbee5d16703ebc241bf2df2e856627fe6946be4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/fluxcd-helm-controller@sha256:1d29b1c80bca147df4532c4df5a37b22e09014c37cabe079ad87156a041a60a8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/fluxcd-helm-controller@sha256:629bb594492dc7ae93e1c092dd972ca776ccd0b8bf088619410999b4a9d220e1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/fluxcd-helm-controller@sha256:716d456ef73b7e18185043040bba6853fd79a2cc3c3851965cb1c0c352865fea
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/fluxcd-helm-controller@sha256:79df0486e5165d54f8b45be154fe86e1329848da400bd9fd79c5c7c7ee99f497
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/fluxcd-helm-controller@sha256:3777f8500c37553149204733fa27e688bed1fc640ed79e1cd5474128dd33dfd5
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/fluxcd-helm-controller@sha256:e6a97814934f2fbebe80d4e43540adb79ae23db8a799426b76324f03983445cb
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/fluxcd-helm-controller@sha256:9671d13c890b41506b2af17faad2c47bae6d4439ccbb5b3a7c0966b8ea77fc75
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/fluxcd-helm-controller@sha256:045f61241a677c5ac7cd38cd74ba8f5d85a9164cafbd2f9d5212f78313363e76
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/fluxcd-helm-controller@sha256:0c2e2841ef9967302ec1df9020816b39d7731dc9243f96d2c87ceef0fca240bc
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/fluxcd-helm-controller@sha256:ad1349176567988bc30fdd3283321c2b1bed8da0447b0894024ef82bac7faa28
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/fluxcd-helm-controller@sha256:bfa5d3e0d18dc342285d2d8143c644f1f9806728f357bd03a91647ba687fa31d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/fluxcd-helm-controller@sha256:336eb296509da81cc4f0fb0a9a8192adb953ac87474fed88e88c2c30f847155e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/fluxcd-helm-controller@sha256:277f2bc305c616e910e93742a537d27e2ec73c294da0d5df22e2c0ceac209ace
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/fluxcd-helm-controller@sha256:7f82446e893c319c86bfa4dc45f07445a5fd4864484e16a0092d1b6b8ae1d760
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/fluxcd-helm-controller@sha256:99b08f16c424bbbca9b4c8b9fa26b0af15af3a3e7110528dde848fd2d87effd8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/fluxcd-helm-controller@sha256:226eb732e30e2b893d87c03f4e3bdabf7942499422148b383fc1fd9e938905b8