Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.2-debian-fips-dev, 1.10.2-debian13-fips-dev, 1.10.2-fips-dev

Index digest:

sha256:134f658d8ca6acc9b3ed159d9b1fb36e2a7aee93aecbc4ab6ca081ab74d84107

Manifest digest:

sha256:2f0b5a2395c9c9c577a072f5db213f8397bff28940d4ee548f4c820f4c874f92

Size

69.80 MB

Last pushed

23 hours ago

Vulnerabilities

0
0
1
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:b94b0d773b35254804c74b13528037d1a1a9ee6d52a474354b3c6f2915d312e1
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:72e2e019f27f3d926c04d4d953ca49d4c5d1df43a399657193afd52092ec9f23
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:55ab90bb659c737481648d6fceeb06b1259588eff438da3ce12dd7f4d8caa12d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:0a5a91e143b37e149e64062a9d5c371525d7d4eaef56e4e5f64995934c593955
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:59b648ab3973fed8a73baca1967f7daac56317cbaf2542c2125cad975498231d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:962a79e5c8ca411d60c276c57eaf6779d4607283e511c899c9c5b0bb497730c4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:95e08da7ace3b09c3cad5a22cb50f95286dbf07bb6aacc6f000e521dfe7c3b3b
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:6cc2d61303820fc247ac94c65d960ea9f630bfcfc52792cadfa9b1e4d5a776c1
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:f820b9f1497811e265274e47793514de795192426d63e29acce719b61abc6690
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:499b1574635fd11fccf3c862bfa6cae3d30ca99b646c906832599401a480e301
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:4f4fac4a048ae038c95e050445df5e2115858620274db259ab19eaf246b4e380
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:da02cc681b9296e565bc37bc8c2381ecfdf103087911684a4fddd676b58fbefe
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:fc2f0a2c13c873593ce81a4a34710f0a3634e15f6366e3c7fa0aff04f29c4125
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:5c47f9b687f846982052fa37cbec2e150cd7776b144e9d2a5ca8c61f6a8c1be6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:706da5d754a76bf3cf33241ec6490ddca5515d379ac4f2635e20a603e0a7cac9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:ddda492673dd7700a479bd167f607eb88bd47c50fba0049da47a67b4df23936d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:0156419daad029030b0c55bcedf1bb30822821a0e9e33b3bb832039f34f133af