dhi.io/kubernetes-pause
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.10-debian-fips-dev, 3.10-debian13-fips-dev, 3.10-fips-dev, 3.10.2-debian-fips-dev, 3.10.2-debian13-fips-dev, 3.10.2-fips-dev
sha256:bfbaaaa67d35d53f8763e7df731c40fc02c6aebe9783b65fc3198648c2f06b77
Manifest digest:sha256:55fbec5052f22446275c1d94b83c5bee2bb22ff4351ff596df500fa5c60cffeb
Size
24.49 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubernetes-pause:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubernetes-pause:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubernetes-pause@sha256:9e44336bc9196fa5ef252a1f1ce541ab51f53bafa3c7d2d68536699a5f99179a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubernetes-pause@sha256:078dcbd0044aba4b64f2e59f7408da892c6067e8ee019e73c9f5f70636bb0719 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubernetes-pause@sha256:499251f9c0a88b577b6936ea611d72171fb041eab03fef2bf5e03f3c7248df1e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubernetes-pause@sha256:cbac5b6d827244d6c4dd166f305f1a6102a978cb80e01843e3eb97549cd5edaf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubernetes-pause@sha256:2ba8a476ede731c9fadfae030e5a76ca419839194651781b1870102b6c482918 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubernetes-pause@sha256:dca748ee9b71c84d03eff0b36d30ea7ec30143588ee2fe7ef2f80b7a63d102ae |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubernetes-pause@sha256:15286f1e9bc7a5d932d477b02fdfa19a9e2f28314cc00357d17f9c5b0f2708bc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubernetes-pause@sha256:ccb3eb7fe48142f6961e64de92f610ec61a116668ee266bc46627938dbde05e3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubernetes-pause@sha256:6375f8cb2bd263de135566afdd3d65a95a1ad3a9c55aa50cbc0965ee8b2c78c5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubernetes-pause@sha256:5e46d187e1b3387324c07ea1c5064d8f43af5dd5b769b235fbe06470edb5f51e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubernetes-pause@sha256:a5acc2adbb4e04711b7a276691449bd849beaf10efece17b95eed7212534ad43 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubernetes-pause@sha256:bf857f291fb49acb80d94aa41b330180146dab1180259390fed1b8b5ab57a7c4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubernetes-pause@sha256:d21b0631fc3883d4f01aad50b2d5584aff80586cab78d9a8b7f2385b75bd3565 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubernetes-pause@sha256:7a801148e55ba4744ebe863f839aa08f8c26c1588cc4e955f32434dfa6c6d69c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubernetes-pause@sha256:f9418b05e842030b02b476a0aa5a1e087bb89fd51c77b50d6857761420acf633 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubernetes-pause@sha256:2705510f729bb1f0c7bffe6e6c081021e9f95b9456df588060ccb4280e86d7e4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubernetes-pause@sha256:7c06013b1e0674ae2ec52ffa558d3277e16529e08c7d8bb6043cc5bc908b66f1 |