Sign inSign up
Mongo Express

dhi.io/mongo-express

mongo-express 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.0-debian-fips-dev, 1.0-debian13-fips-dev, 1.0-fips-dev, 1.0.2-debian-fips-dev, 1.0.2-debian13-fips-dev, 1.0.2-fips-dev

Index digest:

sha256:6fafd4661273929bf3b047ef476c4e631756800faf974ad4d4b9bf24a7d043f4

Manifest digest:

sha256:d0e4fa3aa21082b0b7ef45b58e72887839c5a33ce90cde541123012f657e8585

Size

63.07 MB

Last pushed

11 hours ago

Vulnerabilities

0
2
0
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/mongo-express:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/mongo-express:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/mongo-express@sha256:b9da0b92f0690d5d64492def86a0ab9d772223dbc29125265a0e52ffe572f0b4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/mongo-express@sha256:f8d1af5388e2a6121e2e3c0839bc86483f08770cdfa99121cc8eb0bd470be174
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/mongo-express@sha256:b74bd678afcb0452d87a5a3a599bd58940e443eaf5a723f1c756e10a63664e23
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/mongo-express@sha256:3809f9cc8e260717b305c9a24235ba82802c664d479c81438e08e189c686ef04
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/mongo-express@sha256:5e998d5ef87d1a90fcd44ec86c891fc40c6493ec08f71ad53ce430909cc786dc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/mongo-express@sha256:d7770ed48b56dfb70f0235007137dc6e03829fe99210d12ef4ae6bb06ce1a709
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/mongo-express@sha256:04fd08231ad5976588cb9b170987ba52033b901d2c133645a61f0f4346f81e31
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/mongo-express@sha256:44894125013f0de9559b68a7fc884bba1a4085f7be1aca95e90919cdf880f164
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/mongo-express@sha256:a285d39379659fa3db9026773debbee2de124ae4f9c45974e39962375e0f8a66
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/mongo-express@sha256:618404be3d62a39b6ee5beabb6e9be3410dc0aac5b46755eeedb3fcfe72093f0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/mongo-express@sha256:6f92fef3f5b7b62705a9e5f1ea5e631ad71ed7d09333bb301f456cdca3fdbea3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/mongo-express@sha256:6566c53fc3f7610730954a00da8bc61e8c423718ce3111b680d6df70d83a4ee3
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/mongo-express@sha256:5d34fa3e9480e91290bf4373b60d56d6199b054db0ecea25954f2eeacd25bf12
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/mongo-express@sha256:899fe81dd03bdbaa75a11050a5b953ebf4b4b58d360b33e3f852a5e7238fa3b0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/mongo-express@sha256:02d2f4e16824808903fe8fbedc73d0a21daec6520e8ae118292cca3c60378c2c
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/mongo-express@sha256:b285a0499757dd4d63f83a8052f6946101cec6483626157a8b2008b63a35382d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/mongo-express@sha256:d3c4df846393f6ab05bebe3374b85573f7408d2f68639c7f923203e673c035e7