Sign inSign up
Linkerd Metrics API

dhi.io/linkerd-metrics-api

Linkerd Metrics API 26.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

26-alpine-fips-dev, 26-alpine3.24-fips-dev, 26.10-alpine-fips-dev, 26.10-alpine3.24-fips-dev, 26.10.3-alpine-fips-dev, 26.10.3-alpine3.24-fips-dev, edge-26.10.3-alpine-fips-dev, edge-26.10.3-alpine3.24-fips-dev

Index digest:

sha256:765f243ec86f7ccdfb7116eedf40346a0f6c1e49a25102ebf4cc120c5154e075

Manifest digest:

sha256:ad9fddc71b0e2ca1feeb1128a6980dcf0e829bfa5f20992c91f090c3623e2e0a

Size

38.21 MB

Last pushed

23 hours ago

Vulnerabilities

0
0
0
0
1

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/linkerd-metrics-api:26-alpine-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/linkerd-metrics-api:26-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/linkerd-metrics-api@sha256:cd738685b504d09b6fad99d941a31707b6a9fa29c4c4b55e8fb71d9a97b04499
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/linkerd-metrics-api@sha256:7c5eb451ca81f2b4c73add925280cdc283642c9ecc05d031a69d184548875dc8
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/linkerd-metrics-api@sha256:0eb1a2b3f26c7b81f2827e215ab47b05be46a4763c161dadf49e8137ff605059
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/linkerd-metrics-api@sha256:68bbce1a39c80b5408150dc6668cf8dcecec157c0ce0e3924ba030245a8973f9
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/linkerd-metrics-api@sha256:ff98060341e642f27e9ca88044c5ae7979474be7442bed7fb0c4f58850137ac6
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/linkerd-metrics-api@sha256:8034d6a2873ded920b9f56b3981c26613df87c901c9bbb3992a67f566a68442e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/linkerd-metrics-api@sha256:ad514967b7ad6b5bd5299659ed608de89d964847c4ca3cc889d9251923628046
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/linkerd-metrics-api@sha256:5b68c42ede3377d1743a108f076df391b34e69361fab785815e1f582f312ad30
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/linkerd-metrics-api@sha256:79fb0a994cf207a92856bff23240295bc4492f96083dbfc9843ff93e6123ab11
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/linkerd-metrics-api@sha256:4c01c0d384b9436ff6d9217148b3fc5cae895acecc4cbca7d2cec26d4e289747
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/linkerd-metrics-api@sha256:3fb98c20f246d90829ef80efd56382cf62bcf319b813989f52a4264a04e9e682
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/linkerd-metrics-api@sha256:05710d56054c5662be9d4cd021e334d7763b4a0d4ce9966d7f86bdbb245c6777
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/linkerd-metrics-api@sha256:56a16edf91febd3f363677db11410a5b2d36a0b20526abb38fb882aea62f42c9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/linkerd-metrics-api@sha256:339354a9451480bb011fbdb0da20890a1c212ace5f6319d030766ee428f28640
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/linkerd-metrics-api@sha256:73b7f0f319317c037e8fcd9547d9d574cbb01fc383fa4fa0f9e4d1e7dc9719bd
SPDX SBOMhttps://spdx.dev/Documentdhi.io/linkerd-metrics-api@sha256:33fac4a875ecb7baceda6918cea3a5eec3cf87963e8463ec1634f96457ad7c58