Sign inSign up
CDI Upload Proxy

dhi.io/cdi-uploadproxy

CDI Upload Proxy 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.66-debian-fips, 1.66-debian13-fips, 1.66-fips, 1.66.1-debian-fips, 1.66.1-debian13-fips, 1.66.1-fips

Index digest:

sha256:54468977ecec732ca9f07f1ef6435741bd34918dff7c0d0fd3e8510112071158

Manifest digest:

sha256:c6bb0a11057b86facd7ef4b0a3424d528c842807c7924f589403a96704e606e7

Size

20.94 MB

Last pushed

17 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cdi-uploadproxy:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cdi-uploadproxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cdi-uploadproxy@sha256:bf38d7a6ed7568c89294b76dd3ac0377b49b281114ab9354ff8595fe1b030ceb
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cdi-uploadproxy@sha256:461cca1f56466c7f323a3978e0dc67345efaaecd3eab9637e5395ce6650bb785
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cdi-uploadproxy@sha256:12ae12ffe4a2c1d13576a8a408b6a68ec2a07f40b0b3349d64dd56f2909c0b7c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cdi-uploadproxy@sha256:9f9f3b8759a346c8432737933945a2ad4027a41b33640df3493b1b424f0e122e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cdi-uploadproxy@sha256:7f4da563f9bac507e47a427df03dd1a2fdc1fe1f73c88afd7dc33227e3def4ff
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cdi-uploadproxy@sha256:c345d81abc50f4f3ddcd89efdf3e58a8dacdff010ca62b90fdc025b8f56ae69d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cdi-uploadproxy@sha256:6b7e3344f9d0556f4e1ed0ff73e68d1ef53ffef66a287c18549c240414f48d20
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cdi-uploadproxy@sha256:f5df24437e2e31c54d0492870225202b0db171ace5619d9698a2dd39e42b80b7
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cdi-uploadproxy@sha256:3d402089d12cec0c597b368303d21725061a81a0e350cabfb52d32c9a89a5d1a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cdi-uploadproxy@sha256:5cb8048590301ac9d6574f2f40639e881b9aa7b01818237c3c4bbdc4ec5431b4
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cdi-uploadproxy@sha256:587fffba5f5657ab13e6f09b33c767efafe1bf7403003ed74afbcec60e782f14
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cdi-uploadproxy@sha256:0102fa39758123afa1c34f3afce2eb1ce08a670a140cbf1d70b9567a5857b828
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cdi-uploadproxy@sha256:1203ba0d9935002ba1403065335e4b2b5924e8dc1cbf7ce483f67208810de847
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cdi-uploadproxy@sha256:8097ef9a67a2609ea36875d30cc8dda8ef110e5112f69afd0af392d4b08acde6
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cdi-uploadproxy@sha256:15e03c81fa383bd4ffc7a0fd6696ff7f16a87bed0d9cac1eeea8739227a7dac1
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cdi-uploadproxy@sha256:2a9b9ae599db57152dfad2259128b4241fd90bdc0a2fc0dd073dcdbc3ec9b2b4
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cdi-uploadproxy@sha256:36f9a39e0164199ba415c199d4fce95212721f0b81d98ba4566b483b74935072