Sign inSign up
Prometheus Config Reloader

dhi.io/prometheus-config-reloader

Prometheus Config Reloader 0.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.23
Tags:

0-alpine3.23-fips-dev, 0.94-alpine3.23-fips-dev, 0.94.1-alpine3.23-fips-dev

Index digest:

sha256:0412137df44b09e453e933bd921f91a30ffd1fdd3a64b3f783f55f2ce26ee242

Manifest digest:

sha256:42e523241eb1b0712f624474a50f4194a5789f3f95cdf5b31e9cc9f058e3261c

Size

27.81 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/prometheus-config-reloader:0-alpine3.23-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/prometheus-config-reloader:0-alpine3.23-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/prometheus-config-reloader@sha256:247747fac0b71819d948fae48b5bd7c76f9bbef7ee9a9e85631402462e58fc02
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/prometheus-config-reloader@sha256:5617837d40f52272991133f87ea5066bdf4835d5cf8f87c06a8d3ca5085ce07c
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/prometheus-config-reloader@sha256:2fedccf90ec2c9ef29090dd6a90ca167e561cd54f6824245d853155b51a5ea63
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/prometheus-config-reloader@sha256:60d1efabbd010ff316991cb0c015eef2ace90b3585dac139c399a724c9db073b
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/prometheus-config-reloader@sha256:83ea71b50cde79e8fb17e2bf183ac98647a31b8879114a3ea3d14118c811e03a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/prometheus-config-reloader@sha256:945125ab7fb1f12f09e5cbe2f9284d489496a55e86bb23c828709fb8fbbb7694
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/prometheus-config-reloader@sha256:46e4eea039a4e69113ca74ec97cb04b6bee55eeb8b1d4467e554e98eb6c192d3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/prometheus-config-reloader@sha256:ebc73f51dcb010902a80bf2f9bac6024e627541e21fbe72c9f53387bb54117de
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/prometheus-config-reloader@sha256:10633a9dce4d2aa2e14d7206e2f4f60ae4bbcb5b0894b928f1c232acf8aa445a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/prometheus-config-reloader@sha256:d055353e7899dbf16a52c1a1b467e853bcc34983619b7c9d1d8ad6926179efff
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/prometheus-config-reloader@sha256:a02d28723c4194a49f0d63fbe975838b22f92dcd72b23492f58edb54fee222cb
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/prometheus-config-reloader@sha256:292048932f283db3bb0bc2f9747397ded027f286ed088425550ba7cfa2213d12
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/prometheus-config-reloader@sha256:64f9c36b47d077cbf0115db236b74b65505cc67c6676a8578f90e96ead8c7cb1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/prometheus-config-reloader@sha256:c8fd75b99ca7b9447be4c20d249cc1dc77ea82b57f28f6328f313860d208ba8f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/prometheus-config-reloader@sha256:52b79660d9a43a813d31f1a0072a706991fe4f4abc607cb115fc023291469b52
SPDX SBOMhttps://spdx.dev/Documentdhi.io/prometheus-config-reloader@sha256:435cef1b78f0b2e35c2203df1a044d86ce79f6504e729a4493755c6303865ba6