Sign inSign up
CSI Provisioner

dhi.io/csi-provisioner

csi-provisioner 6.3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

6.3-debian-fips-dev, 6.3-debian13-fips-dev, 6.3-fips-dev, 6.3.0-debian-fips-dev, 6.3.0-debian13-fips-dev, 6.3.0-fips-dev

Index digest:

sha256:0578b43fa1b15a1be5bb68d9a1a1b1c59635513e98d55d35b5ac254091aa99c6

Manifest digest:

sha256:acf3ba6ee70b8d97787ff6a56fee03321488ee56b1e6a992ead8e641d5fc1003

Size

58.77 MB

Last pushed

5 hours ago

Vulnerabilities

0
0
0
2
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/csi-provisioner:6.3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/csi-provisioner:6.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/csi-provisioner@sha256:885fc7affe033506534abd1a9d5bc5d8cf08681bf57c34ec3046a2b8660ff601
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/csi-provisioner@sha256:20842d8bc04c21bca0a7667e170fbcf7180ac9352554dbf419d53a93088bc630
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/csi-provisioner@sha256:d9fe2ce048d8522424bed7e7555ca2eabe0fa5ce147dd1c5305694b72ce28d13
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/csi-provisioner@sha256:1ad92f2d98e8d69accf8c2c0c46abaab6128d478fbb8f999bc2f5f93a2169158
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/csi-provisioner@sha256:5c60e0d807a3cdc096dd18906d094c31b1b6e6287f639da214dd5a9dbefaa687
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/csi-provisioner@sha256:b1fa3f012fccca1e65bcb104c32fecb95b76c553dc1d970332980a1e61d34c9c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/csi-provisioner@sha256:e98597cb729de3d05ad16b1e375061ff7310f7c2d1747153328c81ec31e17759
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/csi-provisioner@sha256:6760f673405217003a5d04e0697ccbe4eacf5bb3b967f2ec8e421b8d5ec0d212
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/csi-provisioner@sha256:62c0596f6434dc7bf57f62ef5dbab9ef6c81c39036116bcc26fb05cf5d692c0a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/csi-provisioner@sha256:f5597e3f25657a0823d0288168f340eeb03a9d3d08f8838cb37f4c18d4866c8e
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/csi-provisioner@sha256:2cb1bf4251074159e21fb30393ffdc51a6bf4df3a2a94dd66cc7dd4b9b383cd7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/csi-provisioner@sha256:cf62f4085cf9526158cbbae490049e8458e8206409e868803b85ec047d8b0b42
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/csi-provisioner@sha256:da21ac2fa50494f270cab4e5be185d454e0ba081c006673019f9a1032cd37c69
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/csi-provisioner@sha256:25ceb91d17b9886a918cb97d7cf0ebd4c5c0e98bd456b3071e3665b532cf9e0a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/csi-provisioner@sha256:2b49709406989e3c2646445e061913124ff07068f16340700063f7018b8e956c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/csi-provisioner@sha256:a53fe8b2258facb97deb8c7a600db7c29919d4f085fd75666d0f78fcdc42b9d0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/csi-provisioner@sha256:bae315d4eb9a1f9b065fdcd91095eba45d6cda3b7c2cf35de601aac45eaa9ab3