Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.3-debian-fips-dev, 9.1.3-debian13-fips-dev, 9.1.3-fips-dev

Index digest:

sha256:4fd21da818b243f28d1cde32b4ac7f8c2319798b564ef3ef803f4ff7feb0a1be

Manifest digest:

sha256:1650834d8efaf3ee4e8f6cff1b1132aa85e0d603419f4eab4312fb5e75e3f146

Size

77.83 MB

Last pushed

1 hour ago

Vulnerabilities

0
0
0
1
5

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:0e511952bee759be34f2c9a69b81a2bb4d988d18376aa2e538b5680942711ee7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:f0ec5bafb7bf12c981b67604ab3949daf944722a17143f261c8e4fa9e7d3f4e4
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:7f61acfab0fae4f77b5d5aff7b1b749d86029465833b985328b506bac38c05e7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:39853453e2c92e86689902db2b2b1862abc4a4c012c4202abdaae12f6da7eae1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:9c11b700f3f4e06ec8f3dd80cc730efe7f08c2413becc3a6036b69ef471ef278
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:9d40bddb411eac6574b6e36d81ecc8f4005355a8230182e0f2db06b3d294471a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:b62f702562c5d06d4d9fcdd1a7d5fe14aa57dd66b776580b4e2179c8935cd86f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:719daccdd09ddae4bd49e8bceb8a14fd51a8bac5cabba9f939d5597bdc5062b5
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:58b3b3ab4ae9f046b30985805f1bff6b4b37754ca9de03de05cecc044e756af7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:34eedba48d768fe33ab35099a54dc5906c34c93ecf5c34eadea105d104ed58fe
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:522cbd0b78cc2940b6898a8f5106b8c562d9825ddd81ab801187e2cd1d12a759
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:12c1d26afde175b1b69c2afb5a3a996f75d4a76c6d32196d201de652c7db0503
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:42a2d9653b03d581e089ad08265309dcacd300cd2625ab53aec3f431e9d1e0d5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:79d51896f7aad97c51c77d0c48d26f6b35ca1381eacec5d2e7864c3daf64c917
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:70691619aea0f7314600c913e128da69550f3e7eefee49a568969025c9a23dd6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:dea1ca643ce33be38e2a7c6e78a9f45e543ede51723016551c0d5e081a6402dd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:9fe119055f2200a7bed67a607639c6fd437f55b23ce024763c72d452137391e6