dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.2-debian-fips-dev, 1.10.2-debian13-fips-dev, 1.10.2-fips-dev
sha256:cbf2067ce597772b2d5578623452d68d0e04fa5152ab6917b7349a8fb5356b31
Manifest digest:sha256:9f3c0c0564cf0c27e2f1be3c5228156e6b024a12e0d2fddeae6ac0562c5958c7
Size
69.79 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:5f652b5e49aa55980b30dcd999a004dcb07d2b64607a0fad3fa4c56b4d268dd4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:b093f45e3c65fe71687773905200d4e483ea06e81be48ab252645a771dc92d52 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:fb077ff17d6c047566f7023f6f298af8031307e14d0f7c9a779b96936f021ff7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:8fc15280c990c4451b91765809b1683af451da55d587554d8bf36e6e6ab5a7ad |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:6b49c1d68c7f087dc20ba61acb3bcbeb24c0f6b519f1f61827b5036d2a530746 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:362157459ebd0b533558e19ea372a2ddad253363df276778ccdf355e0a2ccbe7 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:4ffbc3593526353345674ebc15db761bdc091ca9b4de3914ddaf82295e1bc6e3 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:ca93fa89bba9ae8fece37752caf16b53592e3a632ea802308b2f76d045dc06af |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:e32c12b83d5cafae29f73d0ebea42c5672ef0afbf40d09d2ba505a5186dc7993 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:6652b3eed480ec7bf570c4835184327382109ceb8f8592fbb9a21056c566576f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:919844d3950891e50857b5ffca80dcb0040b57c09934d2bf150c925fe262533b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:559555118b7597e65d6bb2546eb4113b93d46010c779968e1da63b32a5cd7ef8 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:4992b0879accc7f9aad4eaf53ed2b693c3b51388c17bf65061aa7f06b03f0760 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:dff8ce3030524402532104a3b1e097279ff06054661d259183cbee20c4597c51 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:b9da3ce3ef97b7433d60e94b40a6bedb009cc34fd7e240ba21ccbd13780c549d |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:396358e98aeabaf943407f72b175d65bb6b6b04d8e6e0a9b000bc714efc41b5a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:e12380a2cf47dde9499317cfb32e4bed34489b043c22c7f1710f46605bbb2f1e |