Sign inSign up
Helm Controller

dhi.io/fluxcd-helm-controller

fluxcd helm controller 1.4.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.4-debian-fips, 1.4-debian13-fips, 1.4-fips, 1.4.5-debian-fips, 1.4.5-debian13-fips, 1.4.5-fips

Index digest:

sha256:67e97be736ae88d7f3c83a4d67e3cd7d3b50e31771c7eba8208af92c6cc725a7

Manifest digest:

sha256:eed7b4a0c52b2fece9dc48f5937af18b5389a2fef606f3af895cbd254f510e4a

Size

29.02 MB

Last pushed

15 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/fluxcd-helm-controller:1.4-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/fluxcd-helm-controller:1.4-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/fluxcd-helm-controller@sha256:d75172b26ab3358ac6d1bbf7e98335ab7afc719428397e73e814d1e9381cbb48
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/fluxcd-helm-controller@sha256:d712c0c5ea7f5f9129ddf159a1a563aa3a14320fb0c32a9aba2134d855ebbc7f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/fluxcd-helm-controller@sha256:7b89f271a8d927039f9d29107e1d6c2cf382f11dc85f6c17ac00a6a3dbbf9de1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/fluxcd-helm-controller@sha256:988a87061685ac2ae4a051a6bba9af8a748734115ca9a415ecdb3b3f8cdd8cd4
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/fluxcd-helm-controller@sha256:7bb8bb1b9b70fcfe91cb6c4f54a75bbb382b0079315b0799f0c0830d00952dbb
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/fluxcd-helm-controller@sha256:7f862132bec17ae425340b2e06c555edc7d42ac28c2a79afd41df26ba8ea21aa
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/fluxcd-helm-controller@sha256:f8dbf41391cfd3c7b0febfe8d411b21db76ff454f15c3abfa071cff0cecdf1fa
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/fluxcd-helm-controller@sha256:b03520c6341d2dc8642f83a622d9ae8cedf1d97e58f76d60afc72acc862a2e46
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/fluxcd-helm-controller@sha256:898eafe55d93601384dd991ea681d57943003efacdea9705e8cb53a45a74cd09
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/fluxcd-helm-controller@sha256:c4ebf206fef14a326215fe925d182c9e2f9a46d596caa81874e09d6b7db3dc3c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/fluxcd-helm-controller@sha256:0e77929d8383276b9368284b690c3f67a1061aa9349bcbc75312f595437cca18
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/fluxcd-helm-controller@sha256:b11447356bc5582192fef7855299e56029a06394b2df842da2d8b95380986e22
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/fluxcd-helm-controller@sha256:47783d09bd5db90a51796976c7c9bc4a99633258c294d26123386e5701e15d13
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/fluxcd-helm-controller@sha256:78daf37a14aa7cf238407435077782e4abcdb4bccf798b1ad7f34d70ea8f413c
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/fluxcd-helm-controller@sha256:1934d64fc813309a4bd03c146d890629a181b562ef5cf722e854fa71d591c229
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/fluxcd-helm-controller@sha256:5b5f2ac83cd9f791060629a63a6737ef73fa3b960222685d996349809865ca3b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/fluxcd-helm-controller@sha256:bfb03674fb63e332afce9e95280a2a87e3e705d38eb89cfa75d39410fd227b78