Sign inSign up
MySQL

dhi.io/mysql

MySQL 8.4.x

CIS
linux/amd64
debian 13
Tags:

8, 8-debian, 8-debian13, 8.4, 8.4-debian, 8.4-debian13, 8.4.11, 8.4.11-debian, 8.4.11-debian13

Index digest:

sha256:c77f362b48ec34d072a28aa6b055827711e80461d820ffed4478196b40ff1dc6

Manifest digest:

sha256:625c943b1a77c202b085de9fcbe51b8a188c5e2725e404161c3a8c24d6ce8863

Size

65.41 MB

Last pushed

2 days ago

Vulnerabilities

0
0
2
13
0

Support

Active until Apr 2032

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mysql:8

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mysql:8 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mysql@sha256:41446489cbd9b0f9f111ba1a231a7aada6ca3ee511afc9d523e7dc1dff7e29d3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mysql@sha256:9f364e5768d9afa3f4ba80a337bea2459afd335ea5088c484ad4e0a90652de43
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mysql@sha256:3642b2ae949e388bbf0b926eb47a96b08ccb1da1fd268ced6f5ebe8b368acde3
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mysql@sha256:1333a8f4fc337ddbfa301b8471dfb446c0eb41316c0b942213bba94b1575fe7d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mysql@sha256:b13d0acf1ce2877ff9b357255b768f91ca86d0407a47c3b729a8137917975291
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mysql@sha256:3c5f2073e56c4914a2063830d4a1823679018ef774c2124b5cf6f5b051a8883b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mysql@sha256:5e39b0cd97212cdc51474aacce3310137c5c5b075518a6b73e5451250b39fd6b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mysql@sha256:485780a8be20501cae392e5bf2ea293d0157904cf8135c42dccbae1c6ec9b858
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mysql@sha256:c37b8815e00857ebb0906a248a341325527e5c8cf09f495cff0753166445d077
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mysql@sha256:25e164b02bcb1084d6d6972507568bd37542271c501c7be8ba1c2c6a498524fd
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mysql@sha256:f5471b79ae78ff8a6298c38d2c41fe9be4eb2466bdae0847a14e6a1cfa56206c
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mysql@sha256:780bb67efb06a92afc5b9d938d5f4c96b8a45e4b80bed931a4f8a8a9a1388295
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mysql@sha256:f4239104df285f28e4e02231b04a6e7acb9cad3f997ad5ec6d854d21f65dc22f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mysql@sha256:bce22871cf14007358cd5b089f1e0e5ac46ba5423676d402c86587cf810dd517
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mysql@sha256:186a0e0559cb4c9ef3bd17ec90e4ea54463a532d7e8d6363beb2494cee52a6bd