dhi.io/k8ssandra-client
0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.9-debian-fips-dev, 0.9-debian13-fips-dev, 0.9-fips-dev, 0.9.1-debian-fips-dev, 0.9.1-debian13-fips-dev, 0.9.1-fips-dev
sha256:461a42d927057d160547ace8be533f84e1b6761783f328e3c6d415a045483952
Manifest digest:sha256:8fbb87c4047cc8b2f9f0e9e8110536372a837ff120c336885c609efd342d3433
Size
123.77 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/k8ssandra-client:0-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/k8ssandra-client:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/k8ssandra-client@sha256:1622beb5e2d76534cedf451448696a22e7723a99256cffb678c19d6e8f1738c0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/k8ssandra-client@sha256:c7a474b7326183daa5b80be3f844da4f59d5d46955dea6466ba4fd56c0c63827 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/k8ssandra-client@sha256:953c18af6521f68f5f711497f3e50f73f5388d403a57cbec1f8971d3047ee48c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/k8ssandra-client@sha256:bebd535c8c9e971b834f0be42939c8bbabb1b1641365bf16740e369234f32467 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/k8ssandra-client@sha256:52efc377419dd9fc153795d36dbab02a23e6d49ccf4c20c22e1a4738aba16a3a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/k8ssandra-client@sha256:2a2ac2e29864778e896a7c16bedb64e363d1a62a71270510bf025148c1345afa |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/k8ssandra-client@sha256:80e47d9943515422698e179afc811b41cd6d904dc8a0fa8b4ff7063e18819ff5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/k8ssandra-client@sha256:baa4db5d3775b907ae94e2d7e1f30917abf9157705e86a7193e1c1994f439412 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/k8ssandra-client@sha256:237e4b16614f4ac7760953c108c8f680c6c69148fe890c9e224f4a6b27042908 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/k8ssandra-client@sha256:d72707219c89472aae3e1adc330302b4bcfb3c5c6d8326af730eb381449e1851 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/k8ssandra-client@sha256:7c79538fd33e60e4ef5c6692162d157b0bd90e60e769f5e27b438bf2884df6b1 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/k8ssandra-client@sha256:5b08a00f0e9147d8c731109ee181ec30e460572d6a4234b343c1de0fee9c8176 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/k8ssandra-client@sha256:64daf5ebdff1735e8c76a29aec9043b357123eb60fa6dc6d69a2bc5aa67f66da |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/k8ssandra-client@sha256:2178858363f9f8e7a7248ecb05368dbb6d506d31327b0dce20570a156527daa1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/k8ssandra-client@sha256:86c2ad0d17778ba92a96168f3e2f214ad2a579cb108a771c6cee61fc2e4f527c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/k8ssandra-client@sha256:37b32e8a616b476ab82774445c2b510110024d8a24867d0afc6354babc8941eb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/k8ssandra-client@sha256:58bb67898bf12bff7960c981fd25578cc2eac4dad39d0508d29ae36f054d3c50 |