dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:2ff0ca0910042293e5eacc4dc3c976da559e7e80322b69808c70201690633354
Manifest digest:sha256:79db5be76e4c3d69c278b34c4d08f5210dc0d453777587e2d10679b88cc8dece
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:a7efdd1fce4ec36b4b50f51ce2db0680b2919ce87efb851677c1b870598716e9 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:d2fb21d29b5a37f296f42e2f326fb3cbf3cd367c0fd207d858a49a5fc71b23c8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:45c702ca5a4c4a4aec6252421226454711050b411ef2d14f34c2975b06aee190 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:06f016f08864c714ce3069a41e6f3931b48ff1066d506b4fe4ef199466900f5c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:d5271bd20459d0faed4881cb9cfd6146c9cd209e8138ad631338656dcfd7fb4f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:2df6d6830d716ed0d0a8942e1558992df8875d7cd711f9f4ec3c2909589cf878 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:e7dd0f6f38b600d536b095fcb8a33d248ecb2a3d484f08c7de90399876225a82 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:e76b31d8860052e3c4805957b4d98266df87eb8126948a1791a5ec0bf1e3e0f5 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:9709c906ce42b384ae9bbd8efb0f7845ccb97053b88b7b802ebec0a29b53f0fd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:258e2e689845bb6e9faea3396a5f4b4d364a8a270e90172ea3d65d72a27630be |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:7229ae09e4b46db9b2ce2733d08132e42f1e984ddeb480f212dc7f7cfb76fe3f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:2dc695d48b689b5262ac161fd444170b5e14d397816f2c64c8e2c1c5a16d79b5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:61b2fa2bbb767f9f9737fb74165f4968cbda77b6fba206f17db94441c14018d1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:0f4bd3c2fd0f1890ed60fcf682d010ef41b1fa8f7a54695f87a4194a046b9b19 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:0e10491b348d33701362b81807af7dcfdbaf870a0dd0ea6530d474b0d7e194a8 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:3da61f7ff119d49ad7ba395999864ba7a58096382754079f53b3bff77027e810 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:520a76e1f3362c43230ea49ded1f658cc5664668b0ee41650704f2d299678279 |