dhi.io/gitlab-runner-helper
GitLab Runner Helper 18.x (fips)
18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.4-debian-fips, 18.11.4-debian13-fips, 18.11.4-fips
sha256:87c375a9b8720db09647b8eb72de94e3f27acb0630acdf3cb723449d9a51052e
Manifest digest:sha256:c7481312fa2791ca6761f257f4309498e6db3571c34bbd9745ceb0eaf7d7dffb
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/gitlab-runner-helper:18-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gitlab-runner-helper:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gitlab-runner-helper@sha256:d08058932efdaf343c2f17357d5dfe1261a4af9da8bd2bec90d34bc7580d1529 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gitlab-runner-helper@sha256:b0b3792b70381b24f29021f37cb19bbc9abb297407e05e07b7375d1c0e6a4b1b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/gitlab-runner-helper@sha256:18f7e35af0cadb58f2cc1b1947820d599caf72d8bba33ffae5a0e7faf07fb2c2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gitlab-runner-helper@sha256:35a71859ce9cb2e92b05e8eb28b4137b7a79683946b93081bf16ce97ab0fc358 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/gitlab-runner-helper@sha256:6e44822c99f1a39ee43936933dc694eadd0c69411ceed7d6af1187f7e2aa7c6b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gitlab-runner-helper@sha256:ab028dd56545e30a77eb8fb79bd9937d6545c87a0f88515ea1356b2dbe68409e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gitlab-runner-helper@sha256:4ca71424429ce3a039e83777601de740ea50b349317b6f1d8d253273ea57618d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gitlab-runner-helper@sha256:e13a8f519b41b748a45df4ed641e8c00c2bac7182aa095b026e14adaa0bdcd26 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gitlab-runner-helper@sha256:1e50eff60c267b3392b485ab5076d09a6a3e990a7613df5c37a338d677e90a05 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gitlab-runner-helper@sha256:71a2d47932489b7036aac7c5082e99e605cf38ec96f729916ff672a0e6bd2ad1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gitlab-runner-helper@sha256:7ac3fb4da6400546f6f35f1e3f3c76ed3fc9494e77b504afaf7d3095a6821b1b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gitlab-runner-helper@sha256:feec93bff2774c51ba45ba9da94b0eac2a470b609767df4780f363b676964029 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gitlab-runner-helper@sha256:460d1542a57137d4ec98647765d5f3ccf029ca0aeccc53375237fe7ede8562e2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gitlab-runner-helper@sha256:6b5c4add285975c8356e4088fd9938b29e756fada51fc957025ec8c0470b7a4b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gitlab-runner-helper@sha256:8e3f7fdda1e6b399503bea6685a56369ec20d234aadeec463337f30c3acefd03 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gitlab-runner-helper@sha256:b8395678ad4063f170a24dc9e4c51b61b72d86f3a22e5268b0baf90113c73f6a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gitlab-runner-helper@sha256:dd110c0ec5e44930a63d7e004d854df170bf1f5f7fa294340ee5926515af7834 |