Sign inSign up
K8ssandra Medusa

dhi.io/k8ssandra-medusa

k8ssandra-medusa 0.30.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.30-debian-fips, 0.30-debian13-fips, 0.30-fips, 0.30.1-debian-fips, 0.30.1-debian13-fips, 0.30.1-fips

Index digest:

sha256:cbf4c97ddb26007a1536eec176dd7ab7ab8c7922f54e625393245180df753388

Manifest digest:

sha256:5ab98c34f21c3acad59321db7cdfdef086b7c1af320ee63979b2d84d7209ffad

Size

87.85 MB

Last pushed

8 hours ago

Vulnerabilities

0
8
13
16
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-medusa:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-medusa:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-medusa@sha256:89792c930955eaa2576c00b0f3657c8da47102ebcc470e2eaa9e82b36183a65f
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-medusa@sha256:77f1a6e2a33cedbce3f1997b9c8e04e20907eb9d2bb8a2868fe3e00d89e13fe4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-medusa@sha256:7350d24e360c7672ac0f2bbc526db199d3d474a0f2413264427440320192e3d2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-medusa@sha256:c96b827b52e9082b2cd5b1c276418cd5dba592a97cf9ba0827a6c8cd9bb0fb9c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-medusa@sha256:3b8016a3b68694d448963b4dc66fef05660b4b13db76c22e09d2eb0c2ac82e28
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-medusa@sha256:ff32bb6805fb8099019cbebd367d9992f352f8dca483579c3e41fca909ca132a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-medusa@sha256:28114c114bb7c46a73bded76c752320394aae082f0bd361685d77de974e060cd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-medusa@sha256:641214e1ee0bed8f132f8aa5e3e0b47c8d13301824e8ae05c6fff9c1a2a1e55e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-medusa@sha256:9a63311885fca93132d8b3c18da474db7f8cd70ff98234a918a0140a2f08c3af
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-medusa@sha256:79bb46e64195fd94f841b6d20ac6e127cd1b874523390a9234af9a5e5aacb060
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-medusa@sha256:6144b08ed41feee3a469bdddcbdfb04d8e0bc075208e807fef44309cfc74ef5f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-medusa@sha256:9dc8957d42ac544fc0660ca225bb7d6425855b31e99c5db2eaf2c971a8bd1c6e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-medusa@sha256:87733f3b5b9a19f5e8a4d6144efb7b81c43c6ea1451bd694d4e4ac7d2937e686
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-medusa@sha256:07901e84b81a4c11e2a02234bba55517c8ecf8afd2391a979419e1673e5e0c57
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-medusa@sha256:a120bd15a0be31d9249f23ab25b8cbb8e00f395ec3b93265f9b20d6111ed1c62
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-medusa@sha256:29c9613bd57af0d1dcbb316739961ff12c33d2e9c843471f7b640b02276039c2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-medusa@sha256:17186d3032ffcf80230da7a97026c8dd1670380455fe9cb4107891ce87288398