dhi.io/mongodb-kubernetes
1-debian-fips, 1-debian13-fips, 1-fips, 1.12-debian-fips, 1.12-debian13-fips, 1.12-fips, 1.12.0-debian-fips, 1.12.0-debian13-fips, 1.12.0-fips
sha256:34634dafb1d153efa17e5205d18611a88a6c727ba91f3f7cf2392483d9c4b309
Manifest digest:sha256:a6fa1b63a3e536b0157bf975cd44f4c63ff81e85c02fa5341e2f6896b9a98a21
Size
26.29 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongodb-kubernetes:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongodb-kubernetes:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongodb-kubernetes@sha256:433ead2fd7ac185907ee47426a4c5429afa577841b3957feecd2941a5946b181 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongodb-kubernetes@sha256:f5414dd4a4b2635adcf677469386a22a95dbf72bb806e879f4c375cff16d9569 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongodb-kubernetes@sha256:d8d3fe55de2ad91110fde5c287984c998beb5d54cc97e305072c5f5574a8905f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongodb-kubernetes@sha256:6ba9558db49266ce1f66425905875ec270a0f6c1a93657d0cf4832d5b37609dc |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongodb-kubernetes@sha256:d2841a69495cf424f55c7717bc21340daf938c463d5d8bce0256f53037858388 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongodb-kubernetes@sha256:425aef31c2f99ac4dfb0b5309e74f8864e9536f3a66384a928d447508d51ef5f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongodb-kubernetes@sha256:238d1cf1074bfebb4bd0f232b6e5807368a7567c53e433837323e49700765ca5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongodb-kubernetes@sha256:7250df22fdc99727f9d0863d8116488cb28bd720ad7b1653d6b74c37e147f500 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongodb-kubernetes@sha256:685cd26eef2b356f63cdb9349b3ad3d8ea71e0bd0ba936984f9754397e606da3 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongodb-kubernetes@sha256:50e151445b97da3a2dcf5ec0a2fae28648b671a66ea3f4bcbd4a648727d65c10 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongodb-kubernetes@sha256:ab0197d05887c596b4e96f88bd7178ad13efe379b374f6fb212c0a0694b300c8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongodb-kubernetes@sha256:e4dd29ab669d713ad153ea47e6ec70d776e5b4152b8566c2e6b05fa6eb6310ee |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongodb-kubernetes@sha256:d593111a3c525f6ff61143fbff83432410c5316bdda0a41997da8bce83fb651f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongodb-kubernetes@sha256:7cdca1ef1d9316838ff74f791d231d79d9325387675db20e2255b3801ed8d869 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongodb-kubernetes@sha256:56966ba56be1e87665736da46ae77b949b2e075d75a1a8563b5073771837f3f4 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongodb-kubernetes@sha256:40fad529cccda2f6a1f93926ba07d45fedb12d056c523a494a7974f4a5c67005 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongodb-kubernetes@sha256:d6c4a94ee5aa5ad620c9b4d99756bc80c3c9e1b8d95e19330103191cfae60d3d |