dhi.io/kapacitor
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.7-debian-fips-dev, 1.8.7-debian13-fips-dev, 1.8.7-fips-dev
sha256:209aad50c6b762c0c5f31e29c09451ea6abe11badb08a63fb9381ad4d779173f
Manifest digest:sha256:aee768c52d815266e74ca30abaa4fdcb69ccb9a3b60dd92c5320c4b5df04d135
Size
104.78 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kapacitor:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kapacitor:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kapacitor@sha256:ad72a503a48f5dd766af936db87248bbc78b751c07097bcc046173bc63fcf7b1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kapacitor@sha256:ce5ea87ab473af22ed52068822b210a4787ed0ed97f8ccbc07c842ec2b39db5d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kapacitor@sha256:2e1090751c5a55a6b32a3584e57837f70bed739f7bfce2594efbb94513fd76cc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kapacitor@sha256:a7b0b0154589397db8b2a7f9139a5c7f41d7201b37da9c98e04ed245dcf81c18 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kapacitor@sha256:311e68321a35da94c94e17c67b4240fde542e125a6cae40a5539825c0c8cf386 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kapacitor@sha256:42789ea6b8cc788bb22f13e5377f41bb68920f8156bbc4975fca6164b4de1aff |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kapacitor@sha256:6610b7fa9787698da1883075376ba9c4f6ced8b1ffba282cbdb48b79c6a7e68f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kapacitor@sha256:8e1fb8c63421b5fc561d1f4d5ca2a1b2e1576a0a79f0cbfd9247fa12b1596926 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kapacitor@sha256:e5989585ab162cb50d61b8d6abe7d65d5216e42047fdcc9ec13184a5bb45711f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kapacitor@sha256:c6bb9979fdb4f7cded24c0573edeb348569fba6c22f3070bcd2efd74bc766c12 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kapacitor@sha256:dc17610a3e4eb0ce1ddd6f961bd73903cb72311af9d09030fd046d540225da1f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kapacitor@sha256:9ef73a05723a7df0c1d9e66ed931273238c63658acca1021c9b7c2443b56a9be |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kapacitor@sha256:a193f63728426534ea4317ab8114cb818d4b54b5d6e741f38352125b5cecbf63 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kapacitor@sha256:0263f7f6865bb7b52a461a549b76014d81d95b58e70fbce3c23cbf99c45a1e75 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kapacitor@sha256:314eb2b14936d4c6e53820d32f48863055185353845c50e145c8eb7bc8e78e2f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kapacitor@sha256:7ec6e63c705bab40b93c132c290b4857ae2e5ac3c1c4ce059d2dcc09f1a94624 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kapacitor@sha256:539d5e89c5a7672f1267899e4d71d4656eb3d0d0529814904dbc1edcf6463047 |