Sign inSign up
ktls-utils

dhi.io/ktls-utils

ktls-utils 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev

Index digest:

sha256:1c7a7b459e50da2140b1439c4559fd45301b9be64d445a5e2af25609f5457068

Manifest digest:

sha256:d43935e150a9f7619f8e9cb59d3571aa134213b4e9b9d13dba4999560b46a87f

Size

34.66 MB

Last pushed

9 hours ago

Vulnerabilities

0
1
0
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ktls-utils@sha256:4b6e8534fd5d8347ad252ff596408e368e6037b00983bc597880d13f8cecaafd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ktls-utils@sha256:a4e903f2d985b7ad0016cca56b49e20ae08a93150cd11d30abd77a5149024285
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/ktls-utils@sha256:71a401c6b628c1389ed5fc305a37902955875e0e30673cc1ac324679628d1284
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ktls-utils@sha256:b4357e43aca38630e8a1011bbb5f39716655e1890cdf7743ad310e930c98170e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/ktls-utils@sha256:d4f374dc0736b4be5c6625fe380f464066e9d9e7d9998c0acda1411bcc7c6a11
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ktls-utils@sha256:cd5d4dab84cef74545d06dc2ca3fc1bb35821b41185366950d3c4305db8cde3f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ktls-utils@sha256:e49124b157db8abd9f0fabb86cedaa2d002248d503bff1f77c6380d626922934
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ktls-utils@sha256:ea59ef4a3192e22791c484a72c4fee5b49abc9a2d64fc0360d44b9c5e0f462a7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ktls-utils@sha256:91eee13acfa46236cd9cafd2c2d8ac731439a8444e2d8ed7e4992ec304615cdc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ktls-utils@sha256:a7c18b2f467c94284be364b88b976e29ddcf527e739c2a63a1300d727093f879
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ktls-utils@sha256:e889d4048272738444d6bde5bf461631b9ff4675eafa5c7583d1e6eca0da42f7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ktls-utils@sha256:cb8916c33b4aca4c267286af799a2674bbac8f28f070d77341088151fa464cc8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ktls-utils@sha256:31b7b7473cb26cc793615f3b757ffdf9572a8dd3c99e04104ac785ffe3a15a0b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ktls-utils@sha256:1c6c57792686b25990b2df271fc798353e53d14f12bc603dadeca3e28aeb8a13
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ktls-utils@sha256:445d656457cd83561408dd59d9dc05fd9befc3f70eb7c664cfec6da3e6c27e15
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ktls-utils@sha256:7c7b81ee99d943bcc42d323411e6442ab5c8179b7bd72afbeebf220fed92326d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ktls-utils@sha256:4975b1c79125c2cde7539a5379e4b91a154e6df7d52dee6b5361ac4432dae1c2