dhi.io/python
Python 3.10.x / Socket Firewall Enterprise (sfw-ent, dev)
3.10-alpine3.23-sfw-ent-dev, 3.10.22-alpine3.23-sfw-ent-dev
sha256:2eb58ff432430410441c30769bd506dd7a529962d41e73c75f2ae396dd63845d
Manifest digest:sha256:6ccd5a7c8e770338d1aceeecf1e3149af8a3317d022744ec6570de0bf347bd24
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/python:3.10-alpine3.23-sfw-ent-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/python:3.10-alpine3.23-sfw-ent-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/python@sha256:e74394416e97826a4dc87c145f63de0c79917e38b3793e29fce2327135825c59 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/python@sha256:9f44375042e2e8d1f746f46e9e5ff43fc769ef78ea827f5f2a4403c83698cb69 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/python@sha256:46df3482cf0a58f94ccec5a483af69182d654ec1ccc5721ddaa620b5b12f5a86 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/python@sha256:7cf6655827ca48a0a4106ddab1915114cccefd7b146981dc1c8aae236acd2271 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/python@sha256:569a50b868e835c92652756319f25be90aeb7127f7903aacaf094ab6680ea145 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/python@sha256:837b04c36bf5839b3629ff46701d8cf2ba31cac8559a780c4fc8d375f4dd4a1a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/python@sha256:7095dd87c05b13e177ce48aab42126f811f5a9288893a4f0a36bdfa346446b73 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/python@sha256:8702b841339e1028516943cf234a029bf8a95821161690486c777f750298e7b3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/python@sha256:9aa1a2061e7cdf2f3a51823ae75ad42016f66c666e05d5fc4f1c93d3fe380da8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/python@sha256:b868ae280df951f1791c69fd724ead8872f92d1231ce5eebbf86e2ea387d4767 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/python@sha256:b725c3d03f0cc71ce2c1d774429a29570b0b03a8a18b4d60873c525d793323ac |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/python@sha256:73225a577e004d33702d96290c82d22a16670e94cd9d19138f3293ae601a01ed |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/python@sha256:7905bd6ab115338c19cd9eb2879499b321444b0afb63f1bbd7d1f5bb2ec46c06 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/python@sha256:5fa8e55df5f299bb46690117f19f4bed2cc548888f2eb89c134ca0af1d359893 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/python@sha256:d74aea0f3257024620ad57cd58a3232c62f51ea6eae484bc6ece3ebfc7de2995 |