dhi.io/jaeger-ingester
2-debian-fips, 2-debian13-fips, 2-fips, 2.22-debian-fips, 2.22-debian13-fips, 2.22-fips, 2.22.0-debian-fips, 2.22.0-debian13-fips, 2.22.0-fips
sha256:ff071f083efcd84fd349bcd277711df22f43feddb04bee529e3181d4230db66b
Manifest digest:sha256:eb520f239c7cdbedca0b0de3e0a69f687221bc35277e23b6cd8475b335eea560
Size
32.53 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/jaeger-ingester:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/jaeger-ingester:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/jaeger-ingester@sha256:66b03e3f8c231af5347528e01011a65409e360a019d340301daf60418b7b21fe |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/jaeger-ingester@sha256:03849758dfe09da8a817f64cde718682bf709201c7e8cca56b0b6728497b8005 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/jaeger-ingester@sha256:7e19af73a1f8b8f1bb930c64b55863265c4984e10291b56742d3be3f9075f218 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/jaeger-ingester@sha256:f6853ad30f729801b4bf8871e2ffa2dddffb50bd7238afbf66fb5dfdcc6929b4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/jaeger-ingester@sha256:fa46b7c36ca321111ac834c82bc5757782932515bd158e8b40a5f4b7f85a8121 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/jaeger-ingester@sha256:13b0906bfcbacaf1bfca59dfe784cc21f1e703148f6295c15af5d7fc363e0ec1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/jaeger-ingester@sha256:ec1652daedce158f543e9c4c5c1e220565e3356fb79651552a6d14a5ceeae351 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/jaeger-ingester@sha256:fc4a53e84883e00545b6a0f1514a6fa6cf16dd325232f52c64b5084381364633 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/jaeger-ingester@sha256:9dda5685dc05ca89c9294a547fb2d3f3e187d1084ede7e115e5a28c5968179bd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/jaeger-ingester@sha256:847058c10dce8219fc41380430a2f4211b1c07e55facbb41d1db84f65c293b1a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/jaeger-ingester@sha256:2cf8876ad221afd7e873656f96f8a8fb5fbbd0947fc69ab4cba896ff8625d22c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/jaeger-ingester@sha256:df509b3b404017b8d88c6e6d08ae35f90b82006f0477e8749366c11cb1d3f7b3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/jaeger-ingester@sha256:258d317df182709c18fc97ba72d5a27ab35e199f0b1c5b950d79f335c0cc8549 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/jaeger-ingester@sha256:8473e6c5f55f601b98ab1325d3c4aa375e124065db582d5b07209d70a645206d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/jaeger-ingester@sha256:45e5bc93d081965cb43129e7a6a4b2d70deac5a046b20054b917a3a5e9242adc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/jaeger-ingester@sha256:57ac711a6cb1c1c1c1e2909b5f1f7fdfb4b6beeff684d6a7b2aebec46e7474e5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/jaeger-ingester@sha256:ecad382afd7bed56e3b9dcd09326ed25df9213e55064723ec1469a805fb95019 |