dhi.io/netdata-agent-sd
0-alpine-fips, 0-alpine3.24-fips, 0.2-alpine-fips, 0.2-alpine3.24-fips, 0.2.10-alpine-fips, 0.2.10-alpine3.24-fips
sha256:e9ca9c575f50089899584140e749574135c76376b08814a3a528853cbbc0e3a8
Manifest digest:sha256:d46cbf56f75609b0bdb97b3641556cf3c18bfb26906cc7185bac21426876f919
Size
14.39 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:32132ef734cd38731937b102efceabf6d6e7051b576d7b25edfefef7718e60de |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:02e46e13f95a1d465160ae690b8d251c1470d9e8654bbd125cebc4eddda83c87 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:4aec808aacf11721ef29ac93c762fe57959cd2b65064882a3477a1c8c56fea4b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:f6635f532bea41f1128aa4a1cc9e82230610981269dc818a2b26073f8c27bb10 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:c7d5e6a4faf1b8295c336baf1d7474c0c75c28187eccd1390d6e34f112a8a0e1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:bbca4ac6c95805e9b164947d6ec119fa634655aa102deccb5bf7e84e308d40f9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:4167c6e66471180e91b37ad3ee9f88e9981ffb9e339dce30444e5c28c3157b48 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:fdd17f6283da0a706cf2afbdae7f78ff5376efcf6dc46bc53aa1324710391e27 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:a560b516a07c6d99b41a57407965bcfe33ce0ec3cfeb1a130c4f65a553a40ce1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:e922ac63c7dfa26439583b8045bf837b861f3cd1ca63b0a06e2628217e4ef184 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:282166fcdcea54142c8f79e5a02821cd365ef01d9ea38ab9f36ad7f5f67cf07a |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:c9c80d6bc9402c90a3440edfbff69a60cda57d720faa870e1fc2a1455ea72e71 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:455e31321e6eabcc3ae0cb29673fccbd809fc40a175bde2269fb99c87ce79ec1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:fc952adefcc6d86b5389eeeb05dde1303aaf99cb646762f0db10f598f5137cb7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:3b5bf274b3b42c8cd5258312a45efd304f19293fbb0e472ba175aa1754b3b044 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:71bbe50126c27c77ae2d668d5ce54786ab3c3fd91e92025c9b38946120aac6be |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:b2358ba1e89beb165e1885340aee6359a489d58056313833efccee1031f88813 |