dhi.io/aws-sigv4-proxy
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.13-debian-fips-dev, 1.13-debian13-fips-dev, 1.13-fips-dev, 1.13.1-debian-fips-dev, 1.13.1-debian13-fips-dev, 1.13.1-fips-dev
sha256:247f39a70b870ca0447a66e0008aec55f0c1981a1ee4e54cd1c2c0da59670f53
Manifest digest:sha256:273c3c48e11ab2a4aae360cb57277b2ffdf5c71cabf9e33117a3d73c4413159c
Size
31.72 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/aws-sigv4-proxy:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aws-sigv4-proxy:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aws-sigv4-proxy@sha256:960d5f47fb05157390fd53ae1b81be7ff07d12911766ac5767d82a05a860eeef |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aws-sigv4-proxy@sha256:1b7c32e4a48db31a81a5080d01dc34599b6d34b6d3ef710e93f522a70777ba49 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/aws-sigv4-proxy@sha256:c142d999d1b23cd0a50d44e036fadb620be4fe22797bc307b32da54f7a47ec11 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aws-sigv4-proxy@sha256:1bafaf605b96824ee88ce3fcf53e37dcac64890d2857ef72be440bfffa0df00a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/aws-sigv4-proxy@sha256:b55481bef12941d30a3ea7de52c128fcff436aa0d83ac1430a0095cc6d643a78 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aws-sigv4-proxy@sha256:36168d9652c11e70fa8e5651ae99f4d7fb44a82d5262bc7fcaaf9c4ca8a84da9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aws-sigv4-proxy@sha256:b081ed23461d334a7f113e25a8c3848e47268265c0c22596ae7e25a8eec8acee |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aws-sigv4-proxy@sha256:27523b16cd6350c786c9d65b342eca1e6b92394918833fee7bbdba80a096a2c8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aws-sigv4-proxy@sha256:badedcd59d26aeb9b083ab6ebaf88112fa67b26f17963278c9bdb48869fc128d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aws-sigv4-proxy@sha256:d52264d147d0f4b9ee224682aa478f45c627469425ff9783dea0974336bbaa61 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aws-sigv4-proxy@sha256:01840f4e769a5b529990b7330806e6c1d56c69088c7144e3afff9803e29f01bc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aws-sigv4-proxy@sha256:7cfdd2c50c62998b1cee69c8c28d1cb66953874ff800d2db4c2f1cc5711428ab |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aws-sigv4-proxy@sha256:2d1240565a09ce6fd9eca83ad03ec644c3a1f4182689e899e13fbb2c3d958e43 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aws-sigv4-proxy@sha256:2192538a5da682f3d773db42350ce31f5b9c1638dffc6b5d2c4a4285b8812d5f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aws-sigv4-proxy@sha256:d69a173ca7d6b32407d8f5c6c032433fb3732ae2b8a4129d25a8a099d9bd89ca |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aws-sigv4-proxy@sha256:5ff1c903e569ac8221d795b902694ded5b2b5ec723c4cc00ba0f09c2dd8ed8f5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aws-sigv4-proxy@sha256:80bb2a8f7d6dfe485e89b49e643708b1be7a0d6f5089a159d7fab48bcd57b2a1 |