dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:3d303d708582a12db847371f5082122091f05f227ca15edcafd546bd701f8d17
Manifest digest:sha256:cf8e952b24fa6975ef2bffed284deb6ee3092e029c54f1455fa38c2e6ddb714b
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:93c91307010430d3de947074ec2cfdb6dfd10795c169a7ca8e6077e2d4728892 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:3ed2a6d44618840640b054284cc525000df134a3ac02ccd3074c4dd97ad33ea2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:f828f19077bed4bc0e77a878d7be0f33761bcb169b942e2bc0f02ae576e2fd71 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:55354fee4f81600bce1ccaa1fd301d39ac1d0976b966d2fd21a4005809189e07 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:7f397a8d82c4673b3fe08e6fbb78098f806f9b3c826d7cd7fd893a28e84a30fd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:252a2748431f81b59dce9626916567f322d3d5cb9cfe1a2ef9ae33b63b633f5a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:207f87cd2ce555b7bd713ddc3bcba51b6a909dae550d4fba79fbb4f4f8df4601 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:a1c7e8747bfec0a31bca0b2b0036dafa4dee4b828b982751550377a552b3e3ef |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:90ec09a2f3e7e42cf526ae6bd457af59dfde9ddb1d3d5c723cd085b0731dd827 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:68d0e254eedf569ef83e11954f866ab8d0312cdc1b392f79f77bdf46d3c35ad6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:1db25e39e7bda06cde58e004706d123616677ea920df9d1649aa935698ffa308 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:691584b3afe2419be025362408f985de3a1f2972e8d9452fbf9e9a081c20c38e |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:316a2a7d9987d97ed0c2cb1daf5f7771bdb65be0f889e6dc6b318565dac28ab0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:a7e6b3eebc4dfbfe154237ad524b16f7c2d95f3ac41911a52420a8e185b6d238 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:67f1c6c380cc755290cbef8985df869a77e3af952850b78285277b77af177d4c |