Sign inSign up
SPIFFE SPIRE Server

dhi.io/spire-server

Spiffe Spire Server 1.15.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.15-debian-fips-dev, 1.15-debian13-fips-dev, 1.15-fips-dev, 1.15.3-debian-fips-dev, 1.15.3-debian13-fips-dev, 1.15.3-fips-dev

Index digest:

sha256:c8b7534febfdd8ff17c4ffba6bff5fbf9eeadf3fce6d57e83aa237d185d46e08

Manifest digest:

sha256:b3f9ec8026fa6677763742cd17e4d4eead46e44e6ab809c3055bff46c9eed478

Size

90.51 MB

Last pushed

22 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/spire-server:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/spire-server:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/spire-server@sha256:7a4f8eff266414f5594741618d30daa816456b3dc4bbacf3d6e7f97217005ad0
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/spire-server@sha256:afce6935551c4aa8207bf1d3ee7da76821791b03c832f675d5757e81b4721e20
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/spire-server@sha256:1febe4536df43b098da7d14ae5b999ee861f72ced3f153be2829abe71e2ac8b0
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/spire-server@sha256:671e883ee0b0bce2a6da5634a9a1110496ab6995efb36f72a0bdeaf43bbdabc5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/spire-server@sha256:ccc5285ded12013aab37357545121cdc80837855a917b019e63d5aa377686359
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/spire-server@sha256:8b626b7c3cb6c7007f4dfc7f5695b8ea8711984874c5e89ae992e5cb2221c479
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/spire-server@sha256:53cce8fa5c6382ace4a9df440506e509b9a5fd6e86027f878233894cc4f90386
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/spire-server@sha256:1214287e600631583871564d5d0f36f8f1cfb895bddccf499a88c9c81f85a512
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/spire-server@sha256:9f22262e4e632e5017d459c8aa9b0c5020ece0503072b842d706fdec6d8b70c7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/spire-server@sha256:b7e3ac1e39ae852f8369d35a5ee8f8710458c9fa4e1514a3b8ee2990399b0c27
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/spire-server@sha256:274f4608307bad89ba338de381ff66d368c62fee037304b67dd4afcb14e64a00
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/spire-server@sha256:0fe97ee100b79dc85db337d71ff859e3b18af231c206b4f2b8d9ba92f0bc1a6a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/spire-server@sha256:26ffeb2abc0ca39f3dcab769ca56c7553ea3036428f4ea0e9cf82c5f5a1cf9f1
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/spire-server@sha256:738155a64bc2994366440a16331b7425acfdc2b69120e0ce01d11bbb18145dbd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/spire-server@sha256:a19314754b1feb7f3a9607a68ee36e9fef55d2bf052ec02c538a6f09d65bb080
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/spire-server@sha256:fdfed63649682aceb7368bd3790cfd2d34cf23653f08ea89100d33cf1fae2994
SPDX SBOMhttps://spdx.dev/Documentdhi.io/spire-server@sha256:b6b76d0c5992ac9a977ea92d2fb66d8d9a4534ecc0261a35f43322bc5466f197