dhi.io/k8ssandra-operator
1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.2-debian-fips, 1.30.2-debian13-fips, 1.30.2-fips
sha256:41e467b889267599591c839f0e799d1998d81c6b413e0de597ef09111983d365
Manifest digest:sha256:af97d1f09168d9a2b114ebe4064686531c34eac6dac8ae1ddae806ee1b2e6328
Size
22.00 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/k8ssandra-operator:1.30-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/k8ssandra-operator:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/k8ssandra-operator@sha256:300ef9002b781b8701a7527ca8344f8bbd24e342c9c40ed962c8fed649de8358 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/k8ssandra-operator@sha256:d8f8d4d54c4eec47a2483af8dc57984c93442bab95d094e99e127941e0058b76 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/k8ssandra-operator@sha256:691e44fe176268024778d3d66d3ec5fe609d85fc69766c0e94cfbdfd757f8904 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/k8ssandra-operator@sha256:05d801b89040f217ba8089e30d94aede21ac54c75f9dd14707cd1ab9451b8641 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/k8ssandra-operator@sha256:5a0a51449c8c4ec8db28a6977cf5db5aec0316c455d1b8cae8b508189ef7b455 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/k8ssandra-operator@sha256:5d422a7cd8e4a0523c579e1c8e5c24d3c792bbf463a4aabb80c93c559c8a0ae5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/k8ssandra-operator@sha256:de248613abf174ca13cbeee319f43a925b0e4f5e3690808abf76491617563e34 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/k8ssandra-operator@sha256:44cc9f597403fda94bf5c6bdd4aa83c282fa26cd82487e88a1d73b7721835d22 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/k8ssandra-operator@sha256:7fb9ac89fe1470a0fe520b37924729b4983210b350d64c82d8a67aa84bf3e280 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/k8ssandra-operator@sha256:bc1340a3fff34f7a0766934f3803447b38d4b042bec3fc774a320332c9852276 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/k8ssandra-operator@sha256:84efaf4b4f28ae877dde4856655b31e92846f11d09d144a79d4cfaf971c25eba |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/k8ssandra-operator@sha256:c515684fec233cb49c4eaee47c01ff22093fa4f60399decddabb8dc170e7f490 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/k8ssandra-operator@sha256:4636118ffe7b91583a4a8359ec5171777d8c9d1bc67100a4ce74e8fae1bc9f86 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/k8ssandra-operator@sha256:c00add24e85fef8603289d398e0e8bcb5567c4371cbe8999f6a628ac853c1c9f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/k8ssandra-operator@sha256:7ef891d8ca5fdef9ba7ccf204bd2f3cbd1e2e651212771feeed26d7e2125ee8e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/k8ssandra-operator@sha256:6b7cefb76786cbadbeedfbe5594348a05f292f8031e81e863c9b44ddcd8ea621 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/k8ssandra-operator@sha256:11832e49e00200136faece1b4b8113e75e8c5454c4a75c250e6f18079b501963 |