dhi.io/kubescape-cli
4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.0-debian-fips-dev, 4.0-debian13-fips-dev, 4.0-fips-dev, 4.0.21-debian-fips-dev, 4.0.21-debian13-fips-dev, 4.0.21-fips-dev
sha256:33d1435972561c165b3b8fcff0b6638f174544adcb23c56157470c52ac8e9368
Manifest digest:sha256:9cfeda0e7dc910ce4c4619986c55bd2542450d267577b90329c5f7f4eeb3564c
Size
77.79 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubescape-cli:4-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubescape-cli:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubescape-cli@sha256:f8d682ecfe7b573d265926dca29d21779070eeee7ac84b393dc7fc44934b91ea |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubescape-cli@sha256:e4373b1ab70b2c06016f042b8534efceb3df35f71f3ff711cc67ee1da3f75ccd |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubescape-cli@sha256:da15a5754d326309590b7612966a837e75b4b5ccf14157f3c4e078c1b37eece5 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubescape-cli@sha256:5eaa6dd4f512d66aed830511f064edb5c81deac08dc80014b0217bae018be904 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubescape-cli@sha256:468ee322e2650de35b17e2034c9c78cd3dbd8b9005e13531a185d36921825ed8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubescape-cli@sha256:3c97d7ec563346c09ec9c27445e53bf144ac29d7922c2ba930df0e33165e05f4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubescape-cli@sha256:754dc462610e445d7318c314045fba503910a267a246dd258b462bae3c9ed442 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubescape-cli@sha256:1aa9d9a8334eaf9e1d921b50ef7e8e860510c0ea2fee951baa4618dc5254b8f8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubescape-cli@sha256:4122286331c0a05bdc702af1222db432ab7b50514d2764ba3e557a788b10b832 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubescape-cli@sha256:4fbe551064f2bb991552db3f9bca4392ee366046552fa3ab573119382d4f41ed |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubescape-cli@sha256:834c48a97bddb60a3d2f0c600ae9f8cc7093c6ad62bb9646a5b8001005367e12 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubescape-cli@sha256:22557c0c84aa987f2cfc13ec37fb7eb5206eee44241ef5bb9c5e7b35a2ba586a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubescape-cli@sha256:6f2c94c45e7aaf50b9a6147c09148a77855ce61b7a161d8451a6fb51f8a46ac9 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubescape-cli@sha256:9e5d653b66d22d9948e28ff1cc05ac93e722d9047b40c96e5b6add066368e653 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubescape-cli@sha256:04539e18261dc9c5fee2336513d9cc7c43dcbca00984eadc0dd97aeb1bed07be |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubescape-cli@sha256:d6e8bf50301acdc40f418890fd6685e7e79cd54201ce76c9b18ce3d7aeed39a2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubescape-cli@sha256:8229e78f8bf1f9ef60e6f0a18f11fbba996d2e43fd3c74f8afb7348cbb68d508 |