dhi.io/kubescape-cli
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev
sha256:5f592554c0b7db3167f20947068620be9a99bbe76727192d75a65610155e30df
Manifest digest:sha256:ab509f97c3627c0e59dd8cfbe5c1f99d124704aa2131c6313c740436b397c347
Size
117.59 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubescape-cli@sha256:5f8e375a9fb0c40e305d2466b6e4b42fbf848e6b6c5a8a21620635c01faae2b0 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubescape-cli@sha256:a555aa588737ecc0d8350a6a605cdbff69ae62ab8707b681f20580722ba21f40 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubescape-cli@sha256:5d74eda1f5c102e1b3e60702bfe3e999b335f3b1d11aac8db28fe24a2f0df185 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubescape-cli@sha256:dc15cbbb33404a21af8c3825fac7adeae58110227f3ab02dade96ce0b60bad02 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubescape-cli@sha256:9d77f9f06877abd48dbf78af764fc94f3c410f4d8e6e37cb719f8dd865c712cd |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubescape-cli@sha256:f05ffe59f34851bc03d515079ef0430a3192fb1ac7e42285f59e28501a620611 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubescape-cli@sha256:cd560ebc7cdcf8c5fb7bd424b09a804da11892820e1c4d1f6e95269214a80f04 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubescape-cli@sha256:e18996a258445ad0783058d56e841ba8bf23d3ff5ed62993426cf5fcc1a82170 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubescape-cli@sha256:3fcce468142f52b2aa3c5a2795bc7e86b6c3a536c7df808af2df295aa8239664 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubescape-cli@sha256:496cf423e314136e9950157b9111d0de2ea95b89e657d924c27f3c258b7aeb1e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubescape-cli@sha256:4d0b068cda7dc062875176f1a748f1e6d50d00e52e5ce8ff7ed6e47c47e60a8b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubescape-cli@sha256:d36011c0500761070541d282942ee281ff845de4d6e0ad2ec2ea98e2474b8a95 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubescape-cli@sha256:03592e38e50cd76a95f4d1e33083cea7316702828d61d04bb953360180f0cd09 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubescape-cli@sha256:6d64259b6e07fe227b7aff53d68d76c55ba175c95331401bb9a353bee463e9f7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubescape-cli@sha256:a432e16bc78a7f332d051e59bebce7163c7ae02b060908f4f75dfc031e82e056 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubescape-cli@sha256:d63651efd706a30af049d605cb5405f731423e2ad2e5ef4f71aebdd71a238161 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubescape-cli@sha256:22e2f26c52564a2b9bfc377eb78c492e214ede62d246a84a2e15d0e63076d7b7 |