Sign inSign up
k8ssandra-client

dhi.io/k8ssandra-client

k8ssandra-client 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.1-debian-fips, 0.9.1-debian13-fips, 0.9.1-fips

Index digest:

sha256:16b2b55ee657c3d49707b106aee55d15d71d098fff7ed32681049f53e9f9227c

Manifest digest:

sha256:598dc09d0bfa9c8262f953a74e5258f4600b2e15f0899aaeb9924df25e63e04f

Size

61.09 MB

Last pushed

19 hours ago

Vulnerabilities

1
4
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-client:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-client:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-client@sha256:58ada934f7328c416807058f538d940f278db0340e4fc0c39cf3a4b32ef5e0f3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-client@sha256:09716e8d54680631246132ad90e3543bc716e4ad3638d018755b1221f7156228
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-client@sha256:33b48d53a7c7204674a7e2ee28ca51e3ae0fdd461a44fe7e8eba4a18a1029542
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-client@sha256:2cb8ebf6baeed1cbac7dc19f06aff0d2d2ff47466456dc19d6dfe55ceaf3ed26
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-client@sha256:df22fe17f45a9ad5bc4853bc9c099ead31764c61b9d79324b01d770d92e68898
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-client@sha256:da16a3f98e36ae4219a0fab6e79bc4d178aad9268c6e0eba5098757d62072ff7
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-client@sha256:835723bec97484af88593190bfe13e43f9ea4e7e819df86cfcf752a598fba337
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-client@sha256:a6de69570cae7e0051404ff04fe1897d62ead4842bb096c061bd14ac92e7056a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-client@sha256:6e851c6e9dc2a19ec2550ab10044dee5f0008fe559ac79ed3bede42c7e5d70ae
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-client@sha256:f799322c6fc562b876a4ace95e4c16fef8d33d6f75949611e6a93e504dee47ba
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-client@sha256:9d14e6879097ab02a8ab2f550f8f29f3da9aab05076c04bea4ba29173c08eff4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-client@sha256:1143736671eec53c26818b10146f754f864b224bec7a81e1761b19837551587e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-client@sha256:c64a1d9d42e72474cc931d2c16601983e00405ce7536862b7b744d7d2d6289a0
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-client@sha256:59d2cab565edadf99574d66a1ed94ce57b02801d3915ee78a7d0becb48b5cb35
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-client@sha256:c1356dda1d79adb139ab2653297e8b15df3cd6fb93d5d72706fbf0643b3c8786
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-client@sha256:52baa18afd0f094bab4c814700124a3ec34f3d03fb1e178fe5b2da1bf61723c9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-client@sha256:a2a4b9e7cdbb93c176a7089c7d72dcd4b219512ffa63f581068ebf39e912e591