Sign inSign up
Prometheus Config Reloader

dhi.io/prometheus-config-reloader

Prometheus Config Reloader 0.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.23
Tags:

0-alpine3.23-fips, 0.94-alpine3.23-fips, 0.94.1-alpine3.23-fips

Index digest:

sha256:b2b8608786fc9da9265814bbdb957c7fdd026d5012472b79498109a573401233

Manifest digest:

sha256:8c56f02dd00bf643b264a4e28c3d76aa47f95e084921fd06e9939db8ba05280b

Size

15.15 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/prometheus-config-reloader:0-alpine3.23-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/prometheus-config-reloader:0-alpine3.23-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/prometheus-config-reloader@sha256:e57b9aca77bf9b199d9e4a5330eade8769940127b52be529e53185f7163aa4d5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/prometheus-config-reloader@sha256:2ab1bd1e52bdad5c019f8d24ada87c873a1ad36813d3faf22e655ca99be2ffdd
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/prometheus-config-reloader@sha256:9795181b40f01a587f33d7e00bfa709ec6db287e6cddb5bfafa50b687cfba1d1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/prometheus-config-reloader@sha256:f011665ecf5065e399b796715149b94b044aaace7a9b1474c195bef7e893933e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/prometheus-config-reloader@sha256:a67e7cc1942a5f68a4057d364e3663b4fab2e6628add8e912f21cdffd10b08af
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/prometheus-config-reloader@sha256:e1ffe73fbdcdd3aea409f7687f98f6c5537486007a3ff45e3b864b46803e23c2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/prometheus-config-reloader@sha256:5bb07ba66917c33624c6a9729c8be174d7a885ac0919661f2de2090ca149123a
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/prometheus-config-reloader@sha256:9e333827ca7c8cab0dea3e27c40e93ea9e922f7ee7187e5e0fface589fc6e7fa
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/prometheus-config-reloader@sha256:9ec54a5e3ff6f4d7c0881a609d31f6579b722be7881d3d22558509b7651c667c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/prometheus-config-reloader@sha256:6f84498e2c75326f8dd312f0f29b6f7417b702701b40a4c878080ff25825736c
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/prometheus-config-reloader@sha256:ab0a067df0b0c8f2268bdcb9d6f350989091f743ca41654c9e7a32b95d61d20f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/prometheus-config-reloader@sha256:35b8ee7f3dc8e53a3aaa15719eef22c49c6e3a1ec9ac084ce6f151f167efc3e2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/prometheus-config-reloader@sha256:7d47fbae48de0186041eb7faf9136385b3d898515ccd9994ed73bf93fc1e2c47
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/prometheus-config-reloader@sha256:593fbd5bbbff44a141e1a12374c6dfec98dfb54e71737be6e28cd3f95ad2122e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/prometheus-config-reloader@sha256:d50e565a5ab747ba4eb2cf47236c24100773620211279bd6be1600a104e000a8
SPDX SBOMhttps://spdx.dev/Documentdhi.io/prometheus-config-reloader@sha256:69479177caa0232b7d0fbf34d0efb6dc9c31f35f977701da5ecf9de42fc65424