Sign inSign up
SPIFFE SPIRE Server

dhi.io/spire-server

Spiffe Spire Server 1.15.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.15-debian-fips-dev, 1.15-debian13-fips-dev, 1.15-fips-dev, 1.15.4-debian-fips-dev, 1.15.4-debian13-fips-dev, 1.15.4-fips-dev

Index digest:

sha256:b5066b2ffc07572382945e40795d915119645dedf3dd16c4511cc5b027fbaa04

Manifest digest:

sha256:55981f81001cf153919b56b8886f5ddb0dfce8b873d70b236fec76d07d64258c

Size

90.72 MB

Last pushed

17 hours ago

Vulnerabilities

0
0
0
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/spire-server:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/spire-server:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/spire-server@sha256:3445bc3f349182f4c607b2a703850ab194a42bc6169763501153203aae0091f5
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/spire-server@sha256:ee315874bc9dca1ca21d563f8cbdb953e8bef8cd2e7d879bf4cb1d92d9b0b3a7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/spire-server@sha256:fef82865bb2e9f2b61b7912f617a6e23c5fddd968d73879026d273f0afac5118
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/spire-server@sha256:99913926aa79258b5b7d74ecabcd74a887b9c7a1b12c45de84f0dfbcb1d5d43f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/spire-server@sha256:49f66b636b51892c591627d938faa70a8a28107f9600d317d7c1671e8ef73b54
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/spire-server@sha256:a3089e33810d1d0c90273e43ba502828ca7c8862297e2752b74453ec491b4ce1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/spire-server@sha256:6a83fe99b641f9a59ee38e1189ebe840a1b9a3b76088ae4bdf11cef1e472fa2a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/spire-server@sha256:b1ee9b7205c058f85e02f942db9af6c1bcc68b18cfae18d0606e4fe56925a9e0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/spire-server@sha256:b1d26a7896f7f43a1a58a75eb0706205b7b4b7cb467d739248b58656ffc8b673
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/spire-server@sha256:901b6ddcaa8ca7dfb80cf51ee2321374dc0a4c900018212acb5bef9cffb3ec90
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/spire-server@sha256:ab8214dfbd5d64b107132aeaaf96210c033d0122a0c5189a0438c9b8363f820e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/spire-server@sha256:99fa14780ae91246d0f0a2daf5ec64fd88670aaebc71c6b90929fccc03feb592
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/spire-server@sha256:3f7f7709b95500d20f6025d1b79422dfa6b1b4b8dd3907dd1642d8b4348fda90
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/spire-server@sha256:e9f73b423bc03533d2025fe663dcd0780efa7a320bddacd3b4e3d048a75d7981
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/spire-server@sha256:402e2092e7da439ff5cdcb85d2857ced35d9aa08b780386aaf235f695fa375c9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/spire-server@sha256:8dc8c5e17962e18426f925835211e8144d3556d140f20be282ec247461bf1fbb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/spire-server@sha256:86cecd4633ac7d61ae2bca3d65d38a39b6404f46d0ae309b19324d01b2e42475