Sign inSign up
MetalLB Speaker

dhi.io/metallb-speaker

MetalLB Speaker 0.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.16-debian-fips-dev, 0.16-debian13-fips-dev, 0.16-fips-dev, 0.16.1-debian-fips-dev, 0.16.1-debian13-fips-dev, 0.16.1-fips-dev

Index digest:

sha256:f1151b363c86d4a517731ee666f083273bbbf70bb6159168c830ff533c529130

Manifest digest:

sha256:1c8e61afb526ef5be031d9c5daef3d8059b2db365f7dcec1c7aaa4e87271bc0a

Size

87.46 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/metallb-speaker:0-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/metallb-speaker:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/metallb-speaker@sha256:e84afcf5ee0657608f734d4bdfdd05482801b0d700120092754268e7b86acd1e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/metallb-speaker@sha256:146ed901d87f8048b177c8adbb3c7fe49f7651031c44ba186e295c0c230e1061
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/metallb-speaker@sha256:f79172ec0001f7e5d86dabf20ff173b24cba5e0c18807f9470beaff15e26c64f
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/metallb-speaker@sha256:eb40dff8390bc94cbfb6a9227e19b4d2ddabd2902a6c6e0f327e42e1540ae72b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/metallb-speaker@sha256:229bfa85a8ec4b0c4630d01540af8f925a45eaabb207624863e465b038eda269
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/metallb-speaker@sha256:bd1db9e391f9da4848c6af93a0687204724f63afb23c1b0928be6f3c6f794b7f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/metallb-speaker@sha256:3baba0b5a5f2648c946eb4e10662e4c47e09626da6c29bd638dac12a970bf1c6
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/metallb-speaker@sha256:52ab3c5b5cc651fffa6f87e60cf25c9b138ad1a657b34aafc4edfc1e4f998c65
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/metallb-speaker@sha256:97eb0d1fabd858b95023836a051b9188bd6b791f53f0ef732bc10a02c33b4e07
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/metallb-speaker@sha256:ebefa672964ab4755317809770c3c80f1950445b6723f3cfae6a60d3f4b5287c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/metallb-speaker@sha256:06fdc4f9f9fed94ebeeb8c44023211510d13e83375cab8cf20d03b955645153f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/metallb-speaker@sha256:68929e210089c119b0303989edb34b59bbc42f5b1a880133a97c626bf1ff4af0
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/metallb-speaker@sha256:c09bbffd9456e7dfe2389a44ada10393c18aa4d40c76032ee34299a4b59a42ee
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/metallb-speaker@sha256:3ec95fd2b1beb079df840469f5af9f3de606581d9695fbd9c65bd67ad79d7721
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/metallb-speaker@sha256:aac48a9e5401d0f3e70b827accfb3dce36a1c6299703265c3bb95ac0b809e7fb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/metallb-speaker@sha256:b5cdeb57f6c6aedb057e5c98a8ec9a2ff489ea55a762ac637bb408c622521e80
SPDX SBOMhttps://spdx.dev/Documentdhi.io/metallb-speaker@sha256:120d887579d7e087a6ec42f56caed79ea0aaf188227a6fc30755299dc0a4ada7