Sign inSign up
Kapacitor

dhi.io/kapacitor

Kapacitor 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.7-debian-fips-dev, 1.8.7-debian13-fips-dev, 1.8.7-fips-dev

Index digest:

sha256:786610c6fd2d1a26d3d552c0423120d71515e52297c289dd4e1c2d8b9f1ad3b7

Manifest digest:

sha256:27f7dec0909f6286e723337c0ead4f7b92fd1cb75c24754106d5bd6e368cbb76

Size

104.80 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kapacitor:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kapacitor:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kapacitor@sha256:38768e91aba3c2f8bfa6097511fc282375a924acacd66836475e8ee43351ac4c
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kapacitor@sha256:edb626f30ca9071ddab421ad7a3bb952c4e2549f8b0dabde36c09f96392429d1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kapacitor@sha256:ad511e2f8917702ca113c9f94f5d8d9430b46f9be5e5d40f9564f5b92b6cfae3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kapacitor@sha256:a1e795bba78cb2dacfe509c6bf9ed72b5a40eeab7d7822d63ffc3374ed1c805f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kapacitor@sha256:ab9efc3d74a82ddd2bc04970c43e211f8b6cfc4297e4c755617b52fa401bff8d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kapacitor@sha256:6b1ba455600d69a882de416617720d5a18850ca9eef10fde055fa2174c153a5f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kapacitor@sha256:1d90a856f225a1fc79a6b76eb2e4f709dbf91be54745c986800fdfa453a3f314
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kapacitor@sha256:4c6d0803686c3a390e383c195fcd24e6b649aacda3e4d646e461bbd7b4d21bbf
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kapacitor@sha256:0894e07463d0f9eff13ffbab4677f6e5985e68258540aac901f2192d3c4a49ff
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kapacitor@sha256:e9259da1333728a35d6716795d4820d432602c1d541a8f7884e71b2c101dad52
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kapacitor@sha256:e5f912fe1430df38d7558e28cc50da6bb3eee097784733596b7b0d97c190f40f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kapacitor@sha256:1c97b71eb586c3f073de39d1e760c1587cef1365f384bb58a912af2bd8da4721
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kapacitor@sha256:072d0d673bfd7e1b4c3799ee17898c8dc28258a6edc3aa3c8ff034dd74b62eca
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kapacitor@sha256:9e45320edc86772d7557622ad7c81b30144c8316e8f252af6093d9ef78b52266
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kapacitor@sha256:84341420b098fe946875e393b598950fee114fc71577a3b830cd306522cae663
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kapacitor@sha256:6e4f59a87b615143d4b45064585b2fefffd48b597393ccf3fcef76005ce1150b
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kapacitor@sha256:9de8644046fbf1413a24220d6d01ff07d12390df9cf9eeef07ff4fd639007867