dhi.io/metallb-speaker
0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.16-debian-fips-dev, 0.16-debian13-fips-dev, 0.16-fips-dev, 0.16.1-debian-fips-dev, 0.16.1-debian13-fips-dev, 0.16.1-fips-dev
sha256:e234123a57426556dcfa6ffe27219592124f296a0dd18d49de1b78c2c8fc06a0
Manifest digest:sha256:67464db0e14ac91c33e6fe9db373c706473554587cf87cccfba5dbd10b41f836
Size
87.46 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/metallb-speaker:0-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/metallb-speaker:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/metallb-speaker@sha256:258effea4e1a65c27994cd13f12dcbf59da6769657329e1f3271a147e68a7614 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/metallb-speaker@sha256:872a1b81d1c3fa9b48b514743c4c48aeb121a894f84578d227e76b367bdda852 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/metallb-speaker@sha256:a17a32b64508f8f1541ccb8f6b7625c52901f73af3bcadb541f9756183975456 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/metallb-speaker@sha256:194747240c22a122b2f1c563b48f2ec376174dc88274c8481e48a286745a1f1c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/metallb-speaker@sha256:cc3f7823a98aa78c28ef507a1907a3692ddd39d431aab0df08879dd87ca6045b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/metallb-speaker@sha256:4fc008a3408d396b206ebe4e2cf7f29b309f39b76584059bed2866b063f628c4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/metallb-speaker@sha256:ac5f7b0c372befd37b60c52c63020a74aa3fd5e9de28704a2d601e5e660bf0c2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/metallb-speaker@sha256:849d2fca1587102e5e79b6810230c6cdf63d2b51fe149ddb00ccd85075c86726 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/metallb-speaker@sha256:4cfcb24e683df88e4fe54b6e08e415e1185cbe94c71be980f17ee82f6e38149d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/metallb-speaker@sha256:6a012699d88335f974a8cf2950d0f50835a44cf52f80a6c9e73c93d1e721d37f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/metallb-speaker@sha256:671321b17501e34240813275799ff461f4c6167d11c9d1f7522952b731e69281 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/metallb-speaker@sha256:570a389bb3aab2fdbee8cfea2d78c695b8f586b91c993c6dbbd15f1b4647ef68 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/metallb-speaker@sha256:6f2353ad4c24d5a705bc585d5842b3e61344958bbf990aef6f589d532acad089 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/metallb-speaker@sha256:c8fc2b19222eedb0c77d7b44cf71c476a3881016ae65e346b33960183f2c5220 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/metallb-speaker@sha256:87531a2d107397351e0a106f704a7ffb39799542bdcdb8946aedb45c52f9041a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/metallb-speaker@sha256:9f0b3ca0a41bbf64d352bd6b99896ca9eb7eb15756fd5684387c6b55b3e6aee1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/metallb-speaker@sha256:aca1ec5dd9cb26205b22d7115006abe3a5469cd1f3fedffa744a08a7e3c1652f |