Sign inSign up
ktls-utils

dhi.io/ktls-utils

ktls-utils 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev

Index digest:

sha256:7828e16c06d18ae69f9a1e1a36f1178a0f2e045d3b160e7f0bf2ac3490a5dc17

Manifest digest:

sha256:7f83ee45158cf7695bebf1331e8b599f4dbb5e09f5233b95d63bfa1ca072e98c

Size

34.66 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ktls-utils@sha256:adbe7d15c58a996b026076afd89ae450197d69e10f4c75e312cca3b5ac1b1da5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ktls-utils@sha256:a0fa8db8861c49e8f78c0af1843a283976a053749c9906a1ea91b79ee9adef1b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/ktls-utils@sha256:61a5e392d37ababda87ccadb782e2e8cbf24ae322308523d584bfcdf1e668a57
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ktls-utils@sha256:c168ca058ca76b0f0b4b1822fdb3909f5690d5af2e0dcf793fa45268ccb0d071
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/ktls-utils@sha256:65786d7ef6cbbf1c4477437e81c264b55fe1710248fe700123c3e0c7e139f130
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ktls-utils@sha256:9a4a277e8b9bb4e6bf69d26224d39d25883ab5ad44afb6972be5d234c0f4ab68
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ktls-utils@sha256:84a85dac91c7bbd4c982fbcb1e511b8fb1a99cd1168c1a7a7546780b8d11f2bc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ktls-utils@sha256:ec7046359a9a23158cd52d7437b5453281c74711c7a3b3b750e1d1dd223530c1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ktls-utils@sha256:8a6c658ab6c6c5dc1f756638340bc48fb4760e96f7a90e0d3b61f44bdea29829
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ktls-utils@sha256:3527cf1b637e03fe823997a93ac018fd70891eb4d950a2372a6ba92ea585362e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ktls-utils@sha256:4cb8da38c4cf57664a82b8437f6e3dc4879e20cb1ca4111dd0e0791e744448db
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ktls-utils@sha256:90da4ccda7f45034f578f22d6f80c53e10a3fcd91809ab1cfede988c3a8c07de
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ktls-utils@sha256:d6bdcd384bbdff884b17c0e413b1ae5557ad7d4ec692e3bf04da42ac5e9f0944
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ktls-utils@sha256:f589248209f1edbca026b9a03cecf97d7abf52bc3e907ecf1d8288707a8dfddb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ktls-utils@sha256:e096299f702a50be51423a38631722e99eeba664ac66f99416e5f8dcfd692f0b
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ktls-utils@sha256:5ea436a60215927bb4266a7cf1ebe51c69824243b56c5c8f51a63787c3be69c9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ktls-utils@sha256:000e7a0e4417fd8f6b5aa58c9fd8bddc7ed0e81855cc9e3e7d5c8f59ce3e8c15