dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x
3.3, 3.3-debian, 3.3-debian13, 3.3.1, 3.3.1-debian, 3.3.1-debian13
sha256:0ee59849768eac10828ed3f3ed635661f92e2f25e398805ace154f4d3736ee48
Manifest digest:sha256:a48faaa629c0f3cd0af8882bbcd3aaa60ade0a41b4261e9645cc07b7941555e6
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.32. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:b5033c66dd0fba8c031e308500fd0cca1e902217a94378ee8081ffa54fafcc4d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:ad09f39ca3dded59d8c66b1ce13894904c78b2990b5b5d480a90b638795e6fbc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:a306023371ca85a8bfac3c2ac99f7f33f148defffacd5b7e2714c03ea17a25f0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:6b9663c935740d8acc57dc1046b2b0d663e2384ada9d5f34c3fafec4e7886a55 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:9641cadf90bdfc10c07325eae54209b81501249a23ff7bfb3cdd1b511f356d80 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:032e78794aae1844f52d3a3afc2a30430a7fa08d12189e6c08aa1fc1177631ca |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:55bb27c70ce54e2cbc153cc3291c4a0083d526e04d019c5e25d749af173ed1de |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:51c5dfbf0c7a600e276db9a93161937a7e95f3aa884ece800e1b7356cc2ec75a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:720b012e2f51a3490efa0409a69ae01056756d64a6c4f98a395a3ffb299d8aa4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:791a2a48fc36c9bec6b1371176701b8fd1105a5060b9619815e8942d8642b5b3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:62590747c8d56b9093086a025184aad9fa22776d4cb11d8369edd7cfa261daca |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:17eab1a9bb19440b6e014641c76224fd2f098947283caad5bfb5748fbb03e0be |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:87163f4b9d6351fc5ddb3aa3a952801c74ad345340cb6417ebd4efd1658754ea |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:9bbbd98e74abaaeba34812e78eb549e4f62575f1c4c9ee4f548534948e022e1d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:55d92ba55aa74980b834ba8a855188f3b4de5a410cbbb02c8cdeb7971be95a85 |