Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev

Index digest:

sha256:3c895491b48887a191293daa16cec1982545d1ea9ef5bf84612d1cb6a69f6ea5

Manifest digest:

sha256:1b314f85dda6513ddd59437b80376c52034b259e19105fed736b1f865f601630

Size

68.55 MB

Last pushed

15 hours ago

Vulnerabilities

1
0
0
2
3

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:a880edec8049029e3280ea42b384c516a5b903847ee6a52aa2ffe7ae23268399
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:acd5f578ae7b88e33ed069e3e905ed323343fce938bd707450cca2b2240b2a9e
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:f2095b179a1c8dabdfcead060202adc8fbc7833fa4e557ff4dea077980c9381c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:037d816dde48343fa5e61fbe6cd729dec78265c5979dc1a79d2d4b7be5b81f07
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:1c09ee8f35b4f6e829f22a5e75602e69a05a88df0fd3c81e3893658383507abe
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:33970237fe41b0ea3baba9dc8cd85c46b60e9df86ed08c956e4f776fd5c2067e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:ed16c389f6ee1910017abb89dea8514826a2465dc5dd9db537e220c72a5f3f02
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:fa64cfd41cd33c725cd84b371c2fe99408307fcc44f04b153b50e8f7753e4040
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:74774db298da102d845c154d7f92383c9cd652ca307ce90b00e6c251fe7b134c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:28323cb755e1fb25b9de3ae08329af1a367daa955399aafcd9bd9e381dec1016
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:d0e17750227820d00bd2e450110521a4b42c89d555728ed4a64690b7a9fd8298
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:efdd4096093be87564f14641a2f6303c330af085ed6d4a07516d95abcbbca8bc
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:8d970c59d859cb37f8c6194a59c284d4f2b46908ea1db3661b071e1cc8f96d30
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:d204e6e19878988932416b3fde4a4a246b3ea7867bdfcbe3e9a7e709542149f4
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:ef8e4afaf1ba239da85644a941f796df96a1b0a4b9b8d1e21145388cbdc3f10f
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:4ef3d227bf7fb46f8ff0dbc3a54c1fad468a0ed2c7c294dedebc1ab23d2531af
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:e37a27e2e262f73f9b53a36885dc061bd71cbfb87b1e0c4fe9bd0002312e8287