Sign inSign up
Object Storage Sidecar

dhi.io/objectstorage-sidecar

Object Storage Sidecar 0.2.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.2-debian-fips-dev, 0.2-debian13-fips-dev, 0.2-fips-dev, 0.2.2-debian-fips-dev, 0.2.2-debian13-fips-dev, 0.2.2-fips-dev

Index digest:

sha256:c21664b6033a03e3e210ffdce0910d4f950a05b031799a88464d6fa3173afe8d

Manifest digest:

sha256:8bb417b66440a51be3c921c1cd20b493a4524c1ddc10260776e9953a87208d39

Size

48.56 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
1
13

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/objectstorage-sidecar:0-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/objectstorage-sidecar:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/objectstorage-sidecar@sha256:06de34efdbde0b0089616b8bbf5072651f16522717c70ffb8cbd5324f81732cb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/objectstorage-sidecar@sha256:b763f9e763fc6b606ea0bb2d768349090d42e12be179c6f4c507bae60ce596dc
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/objectstorage-sidecar@sha256:cc9f4f29a755c1bec32ec038a20cf814dc92af2f4784a1fdccf49607a5975f03
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/objectstorage-sidecar@sha256:8ba190d4d5a780a3b017aa3a5fb0e0dfa14da4eb40c26cc78f69806ccedc5304
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/objectstorage-sidecar@sha256:0c9ff9ce083c42b2363ef7c2bdb6501bc7914e5969858ccf2feac11adda70639
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/objectstorage-sidecar@sha256:cbeb5a1035036bcbfa327b3c59f16e7048ca06db066d42c568eecf4c1f7de2c9
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/objectstorage-sidecar@sha256:1ed245a335cda3c6dcdebd78d217a627d9adf8abf2c26070cb92a1f6f56a7dcd
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/objectstorage-sidecar@sha256:a73e17245272eed1291f8ddc2bd60a24bb21202cd28e7e847bd0689a6d40108d
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/objectstorage-sidecar@sha256:3121e0f71c30df87b39767bc25612bf0adc01aaaa90eb037630339d70b054a72
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/objectstorage-sidecar@sha256:d4f6edacb1161e67a8f56b42e004a813f66eee9b7452718844f53fc8c8f1fb68
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/objectstorage-sidecar@sha256:04817d594fc491d81a016e66f45de1711cfdf3a0f8232c050724ba300b559633
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/objectstorage-sidecar@sha256:1c9678acdf6315f3b1396d2ed56cd6ad2e300cecafca610492f67e12194f770a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/objectstorage-sidecar@sha256:81b47bcc6d49652d61ac5fbaa837158ef96cbefc0799043fb28c06cc223b1598
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/objectstorage-sidecar@sha256:963c1e67327c9055e134fdd5736c20c8fbffe9dcbaabe9a8210b2cbf2de096e3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/objectstorage-sidecar@sha256:93d81b45919e71a692ee57007ab6f73067ce80a393d6ff220a36bf16a2f020fa
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/objectstorage-sidecar@sha256:d193bda593106fd3b951dfa49d69adffa120e888e199b10f40631871c19f191c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/objectstorage-sidecar@sha256:6b4da673f4b4311344aec927dbb3680c2e16964294372512e561d820fbf998a3