Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.2-debian-fips-dev, 9.1.2-debian13-fips-dev, 9.1.2-fips-dev

Index digest:

sha256:89fd9c9677531c0d3668a982571c1f71e7aae9a4c0f628428618a2be25e9f87f

Manifest digest:

sha256:6db239c251f07da0833b66aff869e9dcc411674ec5e45b6e73227cc4c47aee7d

Size

77.84 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
2
0

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:113a2aeb83d7184b537a7a140c07076fc7490556a9996389715d8bb75df97acb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:213df5da2db3db2c748c2bc5d0a23404f1e8c3ee2c431d03958e03b793df65e6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:bf396ee78b382cc6cdcf47b87ce84451f0b988cc6b6a9d6ee4dd3f688162386b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:2f1dca4a115fbba09ac1ba3cfccaadb1c12c2573dcd25f0ccdd9d5fa7b11a2d0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:a1d6b614f9124e2f67d4d1d269bd4460ef6df7846276681100164d84d0ef5f8c
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:a8d7c2ae7d61d698f0a90b1ab9a9156d3691f33dab78dbf426daeadc767771dc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:16fbab5b6194e2e1639502212ccc925eddbdb0d3db14af9b7935e316092bf09f
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:ddf4512e3ae339562827c524250ef89dc60781c76346f6302b852411cd12181f
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:fcf73a9024d6a39ad9bc71e95452e3095b265dc264c3acb840dfa5569ee7c27c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:a8ccff2662643b9293ef6dd14fa964f0a863585b26e4c3e7b4684f242d96fe3c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:2664bddaf58bbd51a1dcb515b1b98f645b65b1e13b197515fb84b0dd183e6373
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:62948a460decb1745f18fd713b762ab6ef4895cbde483edb211c6b6d3190d08f
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:2e17cf77985fce937e38a1209f9f4597f922bfd765356c15003776b052c196f6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:3826c5f50af679dfbd4baca432c652a17ebac28d6a1114ab86db767211d942f7
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:3ac20094a86ce94edc31de0550c9e0b047f481fa1dc704efde698e610cbdad81
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:fa427b6ac82c4d91de744e7eb6ffdabefcce8c2d9fe748f47e2141e82a690422
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:6735624c20d87e93258906f7334ddd0ecf972dd7efe2e51d83af8a9ac19dc3f1