dhi.io/netdata-agent-sd
0-alpine-fips, 0-alpine3.24-fips, 0.2-alpine-fips, 0.2-alpine3.24-fips, 0.2.10-alpine-fips, 0.2.10-alpine3.24-fips
sha256:1c1e4aa0e8f32a7402b56096b3685a7d57b00bc54c0ada807df0532d5b6ec6a3
Manifest digest:sha256:e768fdc1c3584bd3accc99f53f2706d9e9598577db941506313f688cf894ad8f
Size
14.41 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:e7c75bd09c03356d9c5108f570e4d5eedf42e60e5389d3cffaa454d7c9317265 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:6fdd6cfce795cafd80bbf624cb8de7e7a72d610ecb5bf40f011e3768b7d70254 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:40b17b2f524d84e2b018e381854365e2b7eae446dc12b7e1868d7d0b45b8a760 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:ffd33f0f3b144a54ce68d4e6543aeb6a45dd9e43a565a495d5996420cf80e0cf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:2824073900fca1f1ec943b515d9e0876993373186b3bea746d523bfbdea0b289 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:f7cdd1cb8762cc59a20e7256593b132fc0b038137d7699687cec4ef6e92f6383 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:a4eeb69dfe14fa4c2e6bb3a768906d6233bd903d9a1423afa0bc2f8b60fc6848 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:1465acff2958a585fba138c3ac60a0d739ca56cad21788594a7bfb6ca3aacc3b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:7d6c0064b9c924ef644bc7a2ee2992d45aac980cf24d5e5722feab3b29ad3902 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:3ec9b99c3f39640f69a373bcb859b372e1b8b445b33e73e15fd543bc0ede7874 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:3ea92ec4c452da4ee2c2fe3eb0caf28ce71263151c3f285a2b96b7f1ad625446 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:cc5d99497276017fef0b6f5838b9dfd878dc5aaec3ae180128d531fddec3b45d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:218aa11c71e04120d44754100fbe13366c04afa7a0aec0a481dd9c2d103c6acd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:b7354def41ebe966b9924bb2aa17de6da01939c875e5027330a4c9e5b87cca17 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:efda4b30cbebd22d8ea97f27d531405b340594ac20a9de755fa0caa8fe367afc |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:e0f73ff19111a270995f852502c391ce19dc755518e6cb38fb6111e140324505 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:1e487ea07efd6ed7deb90e8e9cab1c9dbe5e8b18c9a629f555ef4070bac15411 |