dhi.io/netdata-agent-sd
0-debian-fips, 0-debian13-fips, 0-fips, 0.2-debian-fips, 0.2-debian13-fips, 0.2-fips, 0.2.10-debian-fips, 0.2.10-debian13-fips, 0.2.10-fips
sha256:6001ba04657019c29b80fcecb69e2554468b99ec3a62ced4e59709e0f5d6b7e8
Manifest digest:sha256:116b7d3b74d2c120196cecbe8cc9960d520aa2d7397b8680b7690f93f49ebe82
Size
19.48 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:e407d5c5ea52d1930ce07715fa8e0b9f7b91a3be27ae73ddeadf17a4ec1de02d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:4034a69999e6960e8684d9fa0e08c3d2634fcb500cfc162332faade5f0982817 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:d1432c311241dee17ee79fee00da490fdc4677063c145d97e993fd026206eda1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:aa0bc1d6fbf410d7c52a995bd5c9a5353f19ecf850736beba625b6ba4de39753 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:b44e59f3c839178af72f31d58dfd2d35676a1b8bddc1be75584958c1df7920e1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:9d111c579053d51b5926dda6a2b6976265a118689ce117fa3e3aac2184c60545 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:d0856947c5dcf0cf6edb2a52c5f5ea95bd8b63a90320ee2892b0218859ffc44d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:6a8abe5b13a9418dc4ea1b9ff431e48e635b8df677a8931ccf6a4cc224b85f6a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:7046316b5130c640593c7af0d08cd6742079a0346052dce876a5a061cade1e56 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:a31c75530dc66bc363682d4c6f61cc1f168bf9979e7685c5a9f043bf3d811ccb |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:7eabc42a58d47ea00d3fb093d2fe6114aacbcacc2beb61924c3b8f4c950d3fa8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:39331a3ffff6c9cc85becc56381a702bc424ce5c30d72edb4e1d866ea850debc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:9670db2271738adb736df9281ec3283c59faffe15454c580e92462030afc0eac |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:76dfafbdd9e2c7172f59d524d573602f6714442f45cc07bb956c5d99a2dff237 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:4d0a9ac96b15b8e84a2b33be3ebb0b4a4b1dd83c0cfff71ad881641565d1e328 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:8fbebe7b8419da3c1debe030e9e7c63341b653f729bc0f47e75ea09eef2fcdbb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:9dac8132c0dcf90a5b95702eb6b24aacb59c524b3718feee9d0a6755cdfaadd9 |