Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.0-debian-fips-dev, 4.0-debian13-fips-dev, 4.0-fips-dev, 4.0.18-debian-fips-dev, 4.0.18-debian13-fips-dev, 4.0.18-fips-dev

Index digest:

sha256:ffae0955ec2a467d4b97900a1a75b9db956d59d44b6576eafc955d107c38ed23

Manifest digest:

sha256:5563fc75d15c4b12ef50753e5cc7255bce51882a47b3728c0b3ff6b99ecea8ef

Size

77.10 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
2
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:4-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:b5d4de72ff60bd6939a8d902053ff67a28e6198d351146ff1a48c27569937d44
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:9b115e2dd70b6a4e5d705ab4e1793eed42cc07042fb27171a1209c8f684e5e1b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:c899f67bae016155ec334e3a677994d27d02b7360493470fef6413d4a56282a1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:65b6da1432fc933eabb25fa8f30db0f22dec3c3af2432a9ae7b5a6ef40ccf63e
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:9095137d5c9a9755b809a97a9a5d3997c389ad6ddfe5f69dc3b4b16bb589177b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:04c449d87ac7bce7b3b072a221bf16e7903443823ca861ffca80f01ca7bec310
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:24d1af772795096d23d5be86959da6893d89f713ab65914ab1a309d0cdbfd2fa
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:a635ca616d9ead7b9b52ae8742447cecb7a559444465efc5b088eb2c751d6b14
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:63b4dfafaf9cef40e3ae1205c2432fa457413aa39a5065a9e547fa1de8bf62e2
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:00fe6a2a901febc014279df56d5e10fda7f51ba29f68a500e4fabefbeb39c8a1
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:3820a7c67136593399ed768b303405cca47c18530809be4d23f85e7d805b3b7e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:d2b65d9b42e68f6a5ad5ec8cf55ccc5e680055af960bfbb467a3574fd830ca18
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:e128dbdfcc7d75c2653ce55ad3fac3f6a70e5832e01a66a21ae238340ba85cb6
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:ab467bb95cbc939b5afc9a1c44fbb0490b0793dae5592144426328a29357d9e5
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:1bf502b0d06e5d348023e016903c95bff525c535b11391a2787acafb58182fbe
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:97bff39ae99db0b71def4a39b4f3373a8610acbb3f5e634fc7f489d91b2042cf
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:16184fe21d56fa4613f04526e2bb5bf5f42ed2dc587bd4564a4cabaa86d59980