dhi.io/cassandra
4-debian-dev, 4-debian13-dev, 4-dev, 4.1-debian-dev, 4.1-debian13-dev, 4.1-dev, 4.1.12-debian-dev, 4.1.12-debian13-dev, 4.1.12-dev
sha256:d144ac662a460a3138074d07f75ec0521d790904ce097b6a70bf5669cb72e74c
Manifest digest:sha256:eea3c652b705b9eaf47031248751ba3a0ea049a03c11e164ff87036399d417bd
Size
228.00 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cassandra:4-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cassandra:4-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cassandra@sha256:d64debc5362d8e97ec79b1667e23816a0affcf565990deed81e73344521ba535 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cassandra@sha256:d1c2e67960af4c458ecad1a781f1be9ca9e318d09ce29bd49fbefb771191ea14 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cassandra@sha256:3b1e74c597ad19fadae1af619eb7ab42fbd09984b32644b9085852e4ecedffb6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cassandra@sha256:e68e64aa3a387204e00941ca868f2606a9d4539443c1c9068a87d250c20596bf |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cassandra@sha256:ff65591e3ce331550c9a6a44f6cd4428a6ae481dfbce58f93edeed1bf479fe73 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cassandra@sha256:5013393c549a421caa3a0adfa3ec2bf34b053d698c420485e2d16c1ae4ace52e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cassandra@sha256:2aa50becdf85f9ff8741ba92c64ad37ea31a3178b36bb4f4023fdf6cf9776302 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cassandra@sha256:1d607f7e41563bf953fe581cee3627b47ab457caf5734c50ab78c9e88586dc52 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cassandra@sha256:7d40ae4363a699d85ac68947791e59c57851ef28cef779b58dc09f2cdba72621 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cassandra@sha256:e3e8daa9e83afd304d0a429375561514bff5d7abd5470f1c07ab09393423b0b4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cassandra@sha256:2416001eb88862c2921f98cfa71c711ffe454f74e8e225110d40769a293643cd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cassandra@sha256:344086f0a581a48fde7924e745550fef9cbfd1b9df858f14ef2bf71db95e975d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cassandra@sha256:f85a3d9f8fc56661471e59dd8997bfeb4317478fe8e399afe135b304d8599f8c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cassandra@sha256:0f858fa3618af26449527acf5ee22f5a77dbd9a5e60ade4bab48aeec3063e9c2 |