dhi.io/ktls-utils
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev
sha256:c3b4ab9cdb216c6483c59146cf426b6084fe8ec3f00361f39ef8f1ca8522d789
Manifest digest:sha256:23f9ee014e1c30387f18920bbce81c527606d2b5e75e5b73c6dc42f9ab233d0a
Size
28.11 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ktls-utils@sha256:b63fc5b019fc419b645cf772f1b85e1cc82e9b4e822d8cc1f72cf5425b9e494d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ktls-utils@sha256:076ce8c52eea7fa80efa32fc793e6f8ab9c2509b67d4d59aea69e09fc9538e25 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ktls-utils@sha256:573bd9830933c08c1a3b86c8a6be75a6c247e7c73e8876eca8246fdbf12bed2a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ktls-utils@sha256:179272f44ed8378ecd5d88e6eedbc19bc3e467287e379a282fbfdf1a40a13ac4 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ktls-utils@sha256:fec5b0c4bdc3849bde6f37161a26522e8f2e71c4d7994bb30b40a86d8dd03520 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ktls-utils@sha256:de0e2054e3c7f029c97ad51bf2dfccec6daaac709da6633fdf78c41c43d82942 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ktls-utils@sha256:019f2301a0fd86550ed63dcb157e7eaa5f10279e7e155410edf07e85900f871c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ktls-utils@sha256:f4d4038488b7e760de1aebdedce55d2d040b4e498240a058ca416002263a0e15 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ktls-utils@sha256:0c0c4a35614e565aa6dfc497bc60b4062503ffd518d00545dac16271fca1b0be |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ktls-utils@sha256:5df14362727cb749bb3433c45c1688448254161cbe35ca8158de523f6619d409 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ktls-utils@sha256:8a9cf93951a33a1f0a95c358be34b7e47bc22a0bb970a3cfa2a17e9237e9b928 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ktls-utils@sha256:704fcd18c0245d2a2f442f5b351c9c5472236a16c559ff81409457197425d236 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ktls-utils@sha256:93dfa7243f278a814950d4e71a6c252e405338993ce0ef05854fd8bf550343c9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ktls-utils@sha256:009bf3fae3c5c527fd91244cb9afb9a6f8043156268553a6f2c69f294e61c119 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ktls-utils@sha256:991d06da84c858082071df16d4cf48da0b48a30ac5e8bdb389cd418794f4a60a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ktls-utils@sha256:503069279fef82db14da297d7a3dc5f2befaf307f8872477018bbae4c277449a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ktls-utils@sha256:9d0fa8777fcb9cfb30c8b95f8b6654d9ee3003ffcbea2f9f4b7eda695c0b9ad9 |