dhi.io/populator-controller
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.12-debian-fips-dev, 2.12-debian13-fips-dev, 2.12-fips-dev, 2.12.10-debian-fips-dev, 2.12.10-debian13-fips-dev, 2.12.10-fips-dev
sha256:ad2639f4e73eb92ec4bcce01e11856b8cc8289d74fcabd16e0252fa4c532785e
Manifest digest:sha256:541f12e5bf05d5c89c9d3355b1dcd373ae660898bd717ece61b27c03bee2e0d8
Size
50.37 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/populator-controller:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/populator-controller:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/populator-controller@sha256:cc46a2b9219b6b4ec512ea0e274796561aa5aed24fa066e582ce472560bf97c3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/populator-controller@sha256:232d03e4755d575b5b6a3257c772a7a0d70f26a9b044aaac0aae74b10d5b7451 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/populator-controller@sha256:e132532e37153aae8f4d96f5e52de9733ec386cd33ab92b776f57e21bc6e7944 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/populator-controller@sha256:6ff54eb2dd59dcf0590ba6a858f3f468122339c6b2058abb622bb666c3f46f95 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/populator-controller@sha256:b47f19fe3461c0c6175f14a735c9f838aaf6e9a0eab52cfcf22119dda9d84023 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/populator-controller@sha256:2a9a2bd082de9bec1fbaaeffef2ed5d7b4babca8c4c21bdc0bb68ed3f3aadf3e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/populator-controller@sha256:dbcbade757a19669c91f8541055bcb98802460447ba5e544cd15f017cab5895c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/populator-controller@sha256:a1c786969d3d53dec556db5efa8e34f041feb977a2b44e98da8ee1c2585b2225 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/populator-controller@sha256:60bf325ccc00a9c124e6ee725737ad1b7d0c65933a851a5b71718838d0714f46 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/populator-controller@sha256:a07774a2e704c43a774eb4e473061374f4ad199fa0a7647632c2cdd60261679f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/populator-controller@sha256:f732536feaeb51796abf0db03f137890102ad84beec04b4ebd0b95e78aba1659 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/populator-controller@sha256:399f7e93d30267fde195045dac5f6b81792ceab181dab4ddb29d084d7bcea8e4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/populator-controller@sha256:6e1dc0e56740f6d819b3bde0185cc9010787078512dfa917b9ed7cac64b0b0a9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/populator-controller@sha256:6179f0339ddabec2a9af70fcc1a9e2a7a7b628bd97213c87f5b63583b91edbb7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/populator-controller@sha256:e5a278f03cf8175159f91136d4502d63b1db822ac5811280008c9e1a3cc78138 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/populator-controller@sha256:06c4fd3bb876468f1938f4310ed34863b00e7afeed7237c266a077a5c4f7aaa5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/populator-controller@sha256:25e64e2aa7025026989b3eb5b6e83a14d37d3826ab33b83426df84eab345bde1 |