Sign inSign up
Argo Rollouts

dhi.io/argo-rollouts

Argo Rollouts 1.10.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.2-debian-fips-dev, 1.10.2-debian13-fips-dev, 1.10.2-fips-dev

Index digest:

sha256:cbf2067ce597772b2d5578623452d68d0e04fa5152ab6917b7349a8fb5356b31

Manifest digest:

sha256:9f3c0c0564cf0c27e2f1be3c5228156e6b024a12e0d2fddeae6ac0562c5958c7

Size

69.79 MB

Last pushed

2 days ago

Vulnerabilities

0
1
1
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-rollouts@sha256:5f652b5e49aa55980b30dcd999a004dcb07d2b64607a0fad3fa4c56b4d268dd4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-rollouts@sha256:b093f45e3c65fe71687773905200d4e483ea06e81be48ab252645a771dc92d52
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-rollouts@sha256:fb077ff17d6c047566f7023f6f298af8031307e14d0f7c9a779b96936f021ff7
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-rollouts@sha256:8fc15280c990c4451b91765809b1683af451da55d587554d8bf36e6e6ab5a7ad
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-rollouts@sha256:6b49c1d68c7f087dc20ba61acb3bcbeb24c0f6b519f1f61827b5036d2a530746
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-rollouts@sha256:362157459ebd0b533558e19ea372a2ddad253363df276778ccdf355e0a2ccbe7
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-rollouts@sha256:4ffbc3593526353345674ebc15db761bdc091ca9b4de3914ddaf82295e1bc6e3
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-rollouts@sha256:ca93fa89bba9ae8fece37752caf16b53592e3a632ea802308b2f76d045dc06af
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-rollouts@sha256:e32c12b83d5cafae29f73d0ebea42c5672ef0afbf40d09d2ba505a5186dc7993
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-rollouts@sha256:6652b3eed480ec7bf570c4835184327382109ceb8f8592fbb9a21056c566576f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-rollouts@sha256:919844d3950891e50857b5ffca80dcb0040b57c09934d2bf150c925fe262533b
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-rollouts@sha256:559555118b7597e65d6bb2546eb4113b93d46010c779968e1da63b32a5cd7ef8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-rollouts@sha256:4992b0879accc7f9aad4eaf53ed2b693c3b51388c17bf65061aa7f06b03f0760
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-rollouts@sha256:dff8ce3030524402532104a3b1e097279ff06054661d259183cbee20c4597c51
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-rollouts@sha256:b9da3ce3ef97b7433d60e94b40a6bedb009cc34fd7e240ba21ccbd13780c549d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/argo-rollouts@sha256:396358e98aeabaf943407f72b175d65bb6b6b04d8e6e0a9b000bc714efc41b5a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-rollouts@sha256:e12380a2cf47dde9499317cfb32e4bed34489b043c22c7f1710f46605bbb2f1e