Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev

Index digest:

sha256:65b6900a36d414197ebb6fe77e3f6aa02cb6f5afab1ac5fb3d4f45ed371f6a0c

Manifest digest:

sha256:e68e5027dd87f5294ef60ec77a6eedec6a37050e7a3688501632a0d3cecd0a0f

Size

68.54 MB

Last pushed

9 hours ago

Vulnerabilities

0
0
0
1
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:9071923b0eb2caef686ec44246e36c5afd1f8aa61f9674fea84c0e14f7812178
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:dbfdf32f687615af7440947eb1974b83c258b2dc736a27cf540f086e8eba66c0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:2fc2419eb0536b470810f3cf5cbcfb3e460e93209309dfc82f53f13832061da5
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:8ea623e8bcf42e60380aed3eb809749ee90b62e210a8139ab6de9f39d1346480
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:e3ff54070c06364c3d23738a24b0999be44df1361b4ba8c1a219229eb1123b0d
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:a6881c95c236ad60e28df18fadbfd5ac51dd0e87d2030236af4cd456c021e10c
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:f0add999c5783779c47f1da0a887d60a5857cc5a3b5d0e83dc3644da4abea9b0
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:8aa48652ba503b507095f101e4747cb35867f022b36e1d4bc5107ce85d255592
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:147ad1859cc8d54fc33fbaebc0e04420b73e60b379aeb1882811a783cbab00cb
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:860f31661516a4b9f8d01939e9b94412be1605eba5eaa4ab78299da1fe83370b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:d4c50080018bfabf875b39e816deaac643e620f35fbb6b117f2571785b4f1414
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:7352e9f65c961c86cc1acf916a993fd6e601a7380b249c7211a7b0d64d1e1d02
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:b2f7df5cfd701b425e722b29e2c33c1837d1f2dac9811a251ced5c4685a458ba
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:089af33992657e081fc4ff3326341765522821caf27d94f33f90f1e7f73fd676
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:7f162059c810bbf77722b1d1f34d4bb41abb1a040d80e4b6ba8116c899c2936a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:c8df368c3997514d5f607d003a0c52bded1f49f4180b48a6d0eaf2fe22f6ee99
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:60b07b64240409a6c3b66b185422a305ad135ee0b007c519ce491071c42413fe