dhi.io/ktls-utils
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev
sha256:e0120c366f097738d819f9dbd7f39ec66c0e725d6fc6411006b4c420e4087741
Manifest digest:sha256:bf6abdb63c9b1eadc75858d78f5e3b9e6b32d93a1c4de4fab7b9e919af2590bb
Size
28.04 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/ktls-utils@sha256:c43158fbb781c284a5a54e152e2c9cf11f3403acadd276c4bb0c89c9fe2e35b4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/ktls-utils@sha256:3b368a7523b3ef72a97d1b466831774c25a1634a583c4abbd7e4e2a1c2fad178 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/ktls-utils@sha256:78c794464413bb419d79cb9c8fa91898195689be1a86aa7218e6d879002ac50a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/ktls-utils@sha256:bfb1c911938d768688137c9e061f3d5b4bec203112c63936d9a858598b1ca240 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/ktls-utils@sha256:63c40bb2b315afd7ace2e2450454f65bc35c696040a80f315e2ac391cd9e18e9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/ktls-utils@sha256:cd32561f861d6be214eb987a924af7b13d99f4d66035df2caf68adc8c21d6d23 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/ktls-utils@sha256:629b98dc96688c253e09646166d187a5736ace5ba6e900fcc92b060011699d36 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/ktls-utils@sha256:2fe02387a56690cbb9f6372a858451c0d006b4545236b61440e3f710e9c6cfa9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/ktls-utils@sha256:00a88fdc4aed5c953032de1d33e4500f41130d5d867f1b3af70182ace33b20c7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/ktls-utils@sha256:e3f37a8a3720bb5fbec4f7de06b0de4e7bf624845823afc7fda536c88be3b297 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/ktls-utils@sha256:16f96563557d9434d65c767fc1728789dbd25a681e76c712123146f87a847f5e |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/ktls-utils@sha256:8f2680f4581e802363ef5aecea89e60b0547d4b35777d14364c62bb2eb103343 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/ktls-utils@sha256:105d0dd69f9f9b9ba08bd720b64c2d4d64bd8f51da2ff430e019d96d407789c9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/ktls-utils@sha256:8ab3747d9952b7c3ef58be0aaa5b9680e4095487421c13d8becd738b6a603fcb |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/ktls-utils@sha256:14d79149fe03b4d8320cd30374a7da4e81a4cb62b6d508041b2028f37405f4fe |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/ktls-utils@sha256:73f8e7b6fa7bf5eaa8420d50407ff51a22ce96d82b062196c57faa27735ca419 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/ktls-utils@sha256:6318cb25e2acd02f78a22c1e45b1be4b5117efec8d4821ae337aebefbc126d88 |