dhi.io/jupyterhub-k8s-singleuser-sample
4-compat, 4-debian-compat, 4-debian13-compat, 4.4-compat, 4.4-debian-compat, 4.4-debian13-compat, 4.4.2-compat, 4.4.2-debian-compat, 4.4.2-debian13-compat
sha256:376742dfdacb17dcdfab79ce53e6092a1a7c56d6aaf0e1c0102978aabafae0ae
Manifest digest:sha256:0e8ef587b6ec1095c65951cbff3cc4640773c75b2c37c8189130ed3d9cadbc7f
Size
105.40 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/jupyterhub-k8s-singleuser-sample:4-compat2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/jupyterhub-k8s-singleuser-sample:4-compat --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:de3300d5cd2a0e50b83c5a923aa9e9112b06e336653f10bbf153863cf8b21123 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:e2edbfd56be829a83b583df9004cd1ff6ce34964fdce5b82baf48a7e9ad6ef76 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:980579f781cb6390f96437df72a445ac7db44e058bd850ca11789e313f791e24 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:df5f5c633a2c67609c3fe70e926f3b684b6b01aeb14a0aa579c592dee0819754 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:f334619029038558be272645aeb2862d8b5e2b0aaf529bdac6ffae31e0892f56 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:ba6bcc6bf230df727dbdaf2b3c567b3c3e9408a75470ea4139b1794136994a82 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:bb8e565f198c92240f8d25c2a51ce667d6b846da3d21967697cbce8d68eb92a6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:c9729aeba0adffa304032c70252e3bc4f1e8f57a60f2e19e9977546458cc8593 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:9f04f46dd62320a3e32a4b208a2462b8661de4a148b3a0a47f3f83b691a7cc05 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:3e4ebfa4afab8abbf372b7960aa370cc0f0a5a8c0477d913d8d9457f6a37d498 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:ade4f7911e6dff4337f61f36f00610437bf6bf125404b1f8634d88efd6c236a0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:7a51e2f66b9a1500ef77ac80d5d652ae778e846c3214958dfeca114254fa1ed4 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:147df52f93590584ac6e85024e6daa23e57eb6a7acafd3564b68a510b3622f7b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:f4235ea085cb7a7f85f9f8534cbd22076feaa79c95c586f6f0f134f3986988c9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/jupyterhub-k8s-singleuser-sample@sha256:87cec7a34f719756892d788591acc4c4bb92ebc7e0d6730b45875abf91d75025 |