Sign inSign up
Open Cluster Management Registration

dhi.io/open-cluster-management-registration

Open Cluster Management Registration 1.x

CIS
linux/amd64
debian 13
Tags:

1, 1-debian, 1-debian13, 1.4, 1.4-debian, 1.4-debian13, 1.4.0, 1.4.0-debian, 1.4.0-debian13

Index digest:

sha256:1808e5917114fdf5ce086ce4182ae968f81647fb53686aeac609d326100ba534

Manifest digest:

sha256:aa55189573be29a2f1ddc645b6a3a4f8b94d57b2ad07a419ef3257d247f65ada

Size

24.42 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/open-cluster-management-registration:1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/open-cluster-management-registration:1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/open-cluster-management-registration@sha256:5a0f3ae7df3138910a5c50d81c9e49d4d6d9255c1a40d0f3e713ff1488947927
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/open-cluster-management-registration@sha256:2dcf88339c4807506bb9f31448b28e5ef747c915c907ae029a940dea5ed10292
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/open-cluster-management-registration@sha256:e31f011e01ea73f2f0793477891960c663e748a5512b9b98ecf8acf53e3f78fc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/open-cluster-management-registration@sha256:8ed8b7fe8e7794f167684b4d32e6330fbeabe46d862c52b33d6a79f234e9c7da
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/open-cluster-management-registration@sha256:cd1c6fe1bf7e95bfad4c437e5c20c936e11221ae23484e339c5e5a4d21001cf5
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/open-cluster-management-registration@sha256:d04e21c5a045b2cd5abd09529e77cc2febfaa80121023543169b46befa4486a0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/open-cluster-management-registration@sha256:d07ebb13e65a761bbf163477b00258afc872dc46aa6b88f3a7dd17c645d56d82
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/open-cluster-management-registration@sha256:b8b71015f8e2d26a44773d1b544b7ecba85a4f90b060ed8da28df284314dbdbf
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/open-cluster-management-registration@sha256:edd1e6b66be45db34649a923d422ae964879d25876b63dc7851408f04e189d1b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/open-cluster-management-registration@sha256:5cd74c7274e9f854f859c00fd22d03e6a3fb6e32dfcfe5f6fd2ccd6f4f87cad8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/open-cluster-management-registration@sha256:4112f14bf018215adc3e14a1c8e18bac460e0568791838c3688e53fb832f69ce
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/open-cluster-management-registration@sha256:b002710501fe7313002ec9e2a354a24750a646b534835db50d51b72ee7c170e8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/open-cluster-management-registration@sha256:1e3764a945a20f6c261dac1e6f08aa23e89d01ef3fc90133abb259994774acdc
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/open-cluster-management-registration@sha256:353afc16077c71a8a0c2766f95074a36c69abc0032661805d5c9745cfc4c6475
SPDX SBOMhttps://spdx.dev/Documentdhi.io/open-cluster-management-registration@sha256:cbbbc666b0f98c1bcb94a7902d66ac28ff1ab844269561c489d4c5cae63bd05e