Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev

Index digest:

sha256:e51b5dfa6cab8e6fc3a0d10c214b5d097eae96bd419e4b63c6075393b96d742f

Manifest digest:

sha256:7496e352253cae54f402573670e31788557724a8d7a82aaf4c6012252cd95ae5

Size

67.85 MB

Last pushed

11 hours ago

Vulnerabilities

0
1
1
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:c97e1795227ba5cb5cd8a6b0317a5a04f1ff95ccb382ebee0a7680f201bb6e17
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:bd8330d5ed81ef524ca68f2daaa24daba905ba2a96015a606b7671b9f98494d6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:1b7fe26822e303c55ef2beea250c3759c3664eeca78d8dda8c9a3b42d8fbe13a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:d74f520c1d878d004fc1db61ba58bd61a1cd095d6175c1a4591ad1e06f9dc493
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:e92345e80d0f3c9cd6312ebf383e170960c28b1e6950ed30d7903161b128f2ff
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:68a5c0a55184543d6286deda633140369f460257dbeb84eb16917259d6899690
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:abedc3d2102f46822ba31d70cc7f82a9cb1d88a2b8f564c8bf2dd4515ea1aff7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:1a98dfb9b91787f109eb985f823693e5c5cc1572349a9e4e7d2992d1213db48d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:a92b6459a910b471f86e16953402b94462e4b376eabfe7d845c783273a4fcdfa
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:2dce91d00dd32c77b1088a59d48673d8950f6ea7c5d2b274839ee2e0b2a68b22
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:a37d301dede8281c66be4f396862e02053d0c82baf8446390bd248f34a5cc09f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:25f9037766f0a9c9bcf9e223332b2db53ab2c15d079869b0a82204671ed260c6
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:21bdc9d014769f989a755a76aa90f159dcacf17d275494e5ec37f4d070217188
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:927d3810957c9249bb61ae75a156bd5c518d84a90b4a2816a910d1c0e0af1a8a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:69d2381d2af4d7253c2651d19757e64e10d61caaa1b5d67d675c236f10622efe
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:2c7a2369c97c61aa6605e645b176178943a4384ba6408459b4093bc78fd85106
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:6669eb8b9a9373b7930e9909a6edcdc853745f6a281e187292a3c8d0a68059fb