dhi.io/kiali-operator
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.34-debian-fips-dev, 2.34-debian13-fips-dev, 2.34-fips-dev, 2.34.1-debian-fips-dev, 2.34.1-debian13-fips-dev, 2.34.1-fips-dev
sha256:4d9b6c63f1bae76361d49439563862c9380a44892397cf9854e43438a23432fd
Manifest digest:sha256:befc249d8d585c62be50b1ce8f87bdb56f9c7cf3a3f0277c5ddba3258b9a3172
Size
77.29 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kiali-operator:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kiali-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kiali-operator@sha256:cb73c2709e9eb3c1981a672bdbae3af672b7f0ab537a46f0323693d883d18fef |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kiali-operator@sha256:f0ec6389ff93549af3654c1497829fcdedb19a6e2685fdc0479921e129564237 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kiali-operator@sha256:614074a1c5b0785077f09a5b4dc9dac5e986b9c1cb6217419b52eadce31f1529 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kiali-operator@sha256:81ed067c29204988c39bfb03ae423b7714520aebb91071c87bdb730ddfa69c57 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kiali-operator@sha256:d63e2cec7b71865abcd36160c7a3c1fecb0718e3e5015f5eaa51a2efc6b363a1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kiali-operator@sha256:69fbfb70b19734ee2c403a9c534d3893d866c09cec76da8ce1083462b752c28c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kiali-operator@sha256:e3ecd74f3c0cb29e2ee0b3c8848975c0b3df2d16bfa3d1980b47202c62f1aa24 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kiali-operator@sha256:a9d0edf760f702abb4555600b14e52b2cb6b9a3c23c7439eed3c30c9428fe717 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kiali-operator@sha256:cb604fdb54d5fb2182155a37b1d2761f6712e21fdff44758ce4c8de214b356fb |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kiali-operator@sha256:2b64ff06f40e09592408b85b4e482e35e4a54a5de756161e136891d1dbdd4716 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kiali-operator@sha256:c5ec9169f0c0f2864c4d87cbd92714af2d48d45f23fe35a2f3435cf6999a89ed |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kiali-operator@sha256:b1713fadf2c52033ebdb899fdca42fac70144b50ea1b22b97d037f2553383fa6 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kiali-operator@sha256:202092344e45381ea0b4f75b9d3afa3b153db442c99d00b1524bedfc0ee87bc2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kiali-operator@sha256:34f463206c49c7152ea5d932220dee09d44ada5682b40e93fd4cbc6033d267dc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kiali-operator@sha256:d0b6c6780506ea9ebb2309b25d485760923fa68cedbcabbb40ffe05a481e789a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kiali-operator@sha256:e88e4ee98589df3d5ef409fb846ec7038d420a30bd776e13452d812d5db77436 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kiali-operator@sha256:2f20dd65aad47d36fbb6f1ce1fb62251b37a05d61e38104f4758e2e284c2fc3a |