Sign inSign up
ktls-utils

dhi.io/ktls-utils

ktls-utils 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev

Index digest:

sha256:c9a0b9d7ec95a93dbf1985b7c9a920b9794e38fd9c0ef83cc8e8ae6041262347

Manifest digest:

sha256:c64f84243f3b3b485f8d9c58e585bc262757758f4f6aa44b0a696787dde3d45c

Size

34.67 MB

Last pushed

14 hours ago

Vulnerabilities

2
3
0
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ktls-utils@sha256:dae00ae15a4a6cef2b862e31a3dfb668ba908492fd822c243d2f2c54c1036b72
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ktls-utils@sha256:ef0e26a0c8dd9db88d5a064a3d4fdeca5e1967d08f531b9baf42b87b93c2eec9
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/ktls-utils@sha256:886953e050ffe01935db578b6bebecad8ad860a0ba11089f606dbd77704e6001
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ktls-utils@sha256:1d0d310d29f4ab1e31dada4ea5e694db274eb5c8e939cdb2411b6450bf662233
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/ktls-utils@sha256:182a1bb361ddd1e35d79489bbe071a95f28ddd9cbe59dc3b4aafa9692a41f0c3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ktls-utils@sha256:222553d6dcd9b4ffc4b37a773051795a301184155e98a71da9317f999429d3a9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ktls-utils@sha256:d937b1fd6879712495eb6a3e02358630524c1a394c918b81cf91268c8a17fe5a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ktls-utils@sha256:dfe2348b1074f0ee6a57ec919fdf531682bcd357545206e6e1ef3dac0fb1bf84
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ktls-utils@sha256:716f3e2ae81f2db23f330df2f1153f25d25933738d017b5388237ab03c1feeb2
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ktls-utils@sha256:78030637fac6997e988afc01b11985096ba5753e11ec4b4309429b3356fec7d7
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ktls-utils@sha256:d67a2854176d1d8a6050b52c3590562923e127247076785c7a8985b84ffaa290
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ktls-utils@sha256:9839a3f1e1908bcb7c964f11503d45965cf617dd7e0e6703aa2d36b63dd2f0b7
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ktls-utils@sha256:ebd3aeecdc635d031b959a003ab21a453511b602e1dab78945b619a38c17c77a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ktls-utils@sha256:846cd7e4516aa507761fa96a49fd97dc52c4b06a6180aaceb70b196f6179ee33
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ktls-utils@sha256:f36264333c899f0b0b92512476f9fcee90e965e5b9df5048057533b3c61f5f7e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ktls-utils@sha256:997db22a3b673a4f2efeebaed0a0c038ff0aac8a6fea26016246284061346c75
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ktls-utils@sha256:b54906a065f2df04d37c7a3460ad09947ca7792ba8489735db2936a4d1776a2d