Sign inSign up
Forklift OVA Proxy

dhi.io/forklift-ova-proxy

Forklift OVA Proxy 2.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips

Index digest:

sha256:c40ce790f25063e8df22a1f5f98727b34c6f5def213759ca2cfa171d5c3c1f22

Manifest digest:

sha256:b037e0ec9104e0c33172423b01562ca3d478ac710b92af6893ef3e3596088f80

Size

15.33 MB

Last pushed

22 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/forklift-ova-proxy:2-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/forklift-ova-proxy:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/forklift-ova-proxy@sha256:9103e5cb5ed0fe5c8973d06547d5d6ebbc7a6823ed0fc15b66db65024535713a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/forklift-ova-proxy@sha256:eaf5a1a1fcc8f7d7991b649b199c492c4ac015e37d874ef9d4ffaddf9d15b4e8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/forklift-ova-proxy@sha256:e8be8104e32d84c89d07867123bfb3d7e09fa55707778d5a23e50a1386eb90c2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/forklift-ova-proxy@sha256:ade889834efd188ca936efef698dee7c4c16e27f81f68c217aabec9a4cac6cf3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/forklift-ova-proxy@sha256:87746e26077a327b9edf7239511e54af0d186a42394f158872985df9b006a672
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/forklift-ova-proxy@sha256:92a213134be9b4dac9ae428c8f1fe1725bfcb355e1de32108f4177b63cd739b7
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/forklift-ova-proxy@sha256:c89eab070034ba58f9151310db85c4d8cbe69594e6f7a37497945224db996f28
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/forklift-ova-proxy@sha256:a665b35d2e26185ca96b98d71b8b75d66772d12c62e8f86c0c47483627e95297
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/forklift-ova-proxy@sha256:8300c5b6f7e3306336d5f2888d1afeca0b10c838e55cab0ae01ad0bb09081a13
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/forklift-ova-proxy@sha256:f058d9a128b62738c0119f64234374dae00e35f2ca844091caeee63a8db2b43f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/forklift-ova-proxy@sha256:cb01881cb361be0832c1077e27e37a0ad6748d7ca5ef8c28a6d7e44b880312b1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/forklift-ova-proxy@sha256:19a63d64dc639c96dd1873f0e3e3141a88406599916c617b2ac996484c6b07f0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/forklift-ova-proxy@sha256:e507ba6f08558bb2f04d2efe9e9ef953a1dbf47641e51550b13daa0a404130f9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/forklift-ova-proxy@sha256:1eef47863c213edeecd14caa60d4a9d66dfd5f4d3eb42b1d98ef84cd726bc000
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/forklift-ova-proxy@sha256:094936a42a4639e45b03a739bb92ac855ed6a900a3461b0a35f90baf0010e07a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/forklift-ova-proxy@sha256:5453eb0c8e19e0170c556bb77ac2b331489656a1dbef40ad2c0ae2b50310f2a2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/forklift-ova-proxy@sha256:7d97b272e97d48a791e9eb2c82292d593e877eea6392d7581122edde9fd6e93c