dhi.io/kiali-operator
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.34-debian-fips-dev, 2.34-debian13-fips-dev, 2.34-fips-dev, 2.34.1-debian-fips-dev, 2.34.1-debian13-fips-dev, 2.34.1-fips-dev
sha256:658c4d70c7025ab815f38f311064f57df3da51909dda570c445d8fe8a61132dc
Manifest digest:sha256:d7f434ffc1ced7da64d03d917a23eada5befdc75d73bfe1f18be333f3102fb56
Size
77.29 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kiali-operator:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kiali-operator:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kiali-operator@sha256:905bbe08b97dedd55cc5ceddb8e9a7c5bc7422b289e9bacddaec5ca465e365ab |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kiali-operator@sha256:3430faf3c447d45fc5d4d65efd76c427a5225d914c21dd0fe31cf33bad348ad0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kiali-operator@sha256:25c7186d570fe6b4d3a8fa419cc41075257392b5fa0e68ad43c5c3a0c9451053 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kiali-operator@sha256:9e745bb2de26e45f1d1ff879999b39f60694ba224f65f2c4d4951bfcc0d0dc75 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kiali-operator@sha256:1cc7e4f82d05f5c27a9ef1abcf7241f6780241ebbd0f70869bf43edc6195bcda |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kiali-operator@sha256:eb601852289f84ac38e8b66b5c9586429118986148085ff40299daa35f4c9e4b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kiali-operator@sha256:8441d5a7b41e512dfac699ba6748a5d37b5d73a834dfb8a2c24169ef6c0d0d6f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kiali-operator@sha256:982677b9526efacc07f9a96a8413ef61ebf84fa2a1c58c1a9c0b4e06f8ec8ff4 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kiali-operator@sha256:cb58a7773e00353b233c075928c03b7305495f78aed8a0f44f9e70f6241cd347 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kiali-operator@sha256:1af779b0696396bf9e280047723160601ec667eba32010b4cf3ad00c81a50a20 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kiali-operator@sha256:5e17afbb322073b408a3ff2f6517a7dd831adbbc6087cd2c0f0f6565d282e4eb |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kiali-operator@sha256:b808d0e40872d9fe9f9e3d504c82b862cd168d16da922166174a02e51c621db5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kiali-operator@sha256:4d124cadeb8949392eb08fa7b5ae65514203de3e1c01c36028e95c3384cff4af |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kiali-operator@sha256:1cafee71e2e01b14e30bd86bd835cebb1b572af45372b5853ef5c1fde25acc9a |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kiali-operator@sha256:aea06c3478eb32c41138f5731436804c328b1088f7f6e10391245f0a349489c3 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kiali-operator@sha256:7b5a4dbcbe0695448afb1aae19bff0a2cc254f1151454b9033376fc913ea1f1f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kiali-operator@sha256:efe6d5da9ad62af36b96e6e998e839d8c1416f2358877ca924fbef10de122f39 |