Sign inSign up
Argo Workflow Controller

dhi.io/argo-workflow-controller

Argo Workflow Controller 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.7-debian-fips, 3.7-debian13-fips, 3.7-fips, 3.7.18-debian-fips, 3.7.18-debian13-fips, 3.7.18-fips

Index digest:

sha256:30228baceaefb8b57e3abc183443993971e912705df02f37ea607e86ec594fed

Manifest digest:

sha256:08d8d2498e3d629092ef77bda104c878881447df54d5f66d1b03c79acc734e1d

Size

49.35 MB

Last pushed

3 hours ago

Vulnerabilities

0
2
2
8
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/argo-workflow-controller:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/argo-workflow-controller:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/argo-workflow-controller@sha256:c8837432a4458448ab3e557f0504da17c6a400e3f86a0d45f8a5273fb5066a01
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/argo-workflow-controller@sha256:0cd033a9da8d21f41d0700f4fc89b1d2725dbee69638f9f811696d63f7bd25da
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/argo-workflow-controller@sha256:5a6e1995b293e2be669d0ed7e881f64f80e998fd249b18f37b3088d32419a6b3
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/argo-workflow-controller@sha256:e95465accaba946269c687ccb7e77d0d1d1bc6d68ac5104f0319d5bf8bc97e2f
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/argo-workflow-controller@sha256:b35aeae1710baa040484dfc2398c25c9bdfb3d55eee75e48832d447136f28a86
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/argo-workflow-controller@sha256:50727919c7f96cb5681abbaef292adea71a7d3f7c3e83f94bc2e21d92aecdc7e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/argo-workflow-controller@sha256:77eb6b03f7d70e71f4816dc802a9678003b393872dccd873b1e7e020e31adcf2
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/argo-workflow-controller@sha256:22d31d2964f905e1c5f234f698aedf97ba5c965b9a3160f5729235bb39d69cea
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/argo-workflow-controller@sha256:eea58e8a418ff85c82148c4ba2adf22190cbd459a914d7bed7f3302f8ceb1935
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/argo-workflow-controller@sha256:e4f1c20f598c5ee317f6f2b06a913d9d802896f89df6266c59113988473e6aba
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/argo-workflow-controller@sha256:acebaad0d5b3bad82cc1b73566b07f7bc1088b9ee570f2be563da057c28227c5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/argo-workflow-controller@sha256:eddcfa587e90fbe5c893f61364349b3b9fe940551ed10d46f05e600d4caec364
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/argo-workflow-controller@sha256:ce912d9fa52095561a80947d54726deaf45a65a259155dd6224d51c1cb3e42ef
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/argo-workflow-controller@sha256:e9e490d3353dcc6999bdcb2cc7cfa59e4e93190368098306c13ffe65d0131f8d
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/argo-workflow-controller@sha256:c988de065cfa987f20f23a3b257787473f6767e02822eb887b4f0284ec24efa5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/argo-workflow-controller@sha256:022659ead3f19e64562d278ecbe981fdf701b350b2958f9872cefa2065b6d412