dhi.io/data-prepper
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.16-debian-fips-dev, 2.16-debian13-fips-dev, 2.16-fips-dev, 2.16.0-debian-fips-dev, 2.16.0-debian13-fips-dev, 2.16.0-fips-dev
sha256:b988f6a79d4fb68f148f851ef4c2816b93a3dfc9d89f84f391ce4bcf1b024a4d
Manifest digest:sha256:017346bb43a6d6cbb41db6a61796648b92c4ee9cb8afdc044a423afc350d39bf
Size
453.12 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/data-prepper:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/data-prepper:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/data-prepper@sha256:620a92d47d1f2c413177276dc687013e58aa4b6fbe36822c5c9cc06d8931e93a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/data-prepper@sha256:989975b69c6c8611f45777032bd4d9453a2832fafe62e1a2793a08525d5cb952 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/data-prepper@sha256:09c09e88cb1ece6604811031944568ff00cb3c972cc2c76ceafa877caf967c03 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/data-prepper@sha256:82b7a5f6cd60ee9ae6cbef52d82814064d3e54c92553d5bd3a272decf0c46194 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/data-prepper@sha256:6f179831f1df7e90248236c7a3251cc97086646ab8a971bf2a1bf3dc75097a27 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/data-prepper@sha256:a4d724ea7ee66ac0467fb1aaaf05b0967f0885e30c9e227ed17719e0cdcbb1d1 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/data-prepper@sha256:dee6a0aab8ec6cacb52f5177bf3e04665e70d8680d07842615cf0bb4b01fd21d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/data-prepper@sha256:8cff65994489a812376b3bce74053aa59fa8376d6a259b24f66f5ebc38fd17b4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/data-prepper@sha256:eedbf22e4354525871783de34a230b66540ea8727ab8a14b0a8421006a2eab7f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/data-prepper@sha256:10f201adf6cfe3c9e912eaca92c525e3df4ff7af2c2ecefaf2ddb6886156849a |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/data-prepper@sha256:06e12bc341649044aad89da384ba9de0f0a1af93a809c89259207f8a8bbb22f8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/data-prepper@sha256:da49ea59829ebabade5e66c46722c62fd647e12c2fb19cac7e8352efff11c2bd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/data-prepper@sha256:c60ab4201c77bac0db8ba3cb32de6c208df1d0ff750d8770dc82d1265c4e67b2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/data-prepper@sha256:5a1d09f2f4591d13b642c50943bc0a3fae0d4ac89ccb6cf6daa7f7ba761f950a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/data-prepper@sha256:192c12be11f3222ffd7b08c4a9b0286133905b7593e764f0cafc319b376954c9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/data-prepper@sha256:d3f3d64c533b2060bcbfa903f11b6f4087cb2dd41b6446478b1491b1958a9559 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/data-prepper@sha256:f72488c84bde9ead439ea78303162e866cf2be54ed89f8924eddad05a29c46b6 |