dhi.io/netdata-agent-sd
0-debian-fips, 0-debian13-fips, 0-fips, 0.2-debian-fips, 0.2-debian13-fips, 0.2-fips, 0.2.10-debian-fips, 0.2.10-debian13-fips, 0.2.10-fips
sha256:f4ba691aa9584761cc9c8944663864ca74a55937bbd6df55612f18edc101d2ba
Manifest digest:sha256:f6899e1ee79c5f6abc54c7f0cadc037b6a7c55c00f7fd06cf7e011e337e6aae9
Size
19.49 MB
Last pushed
4 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:1b772123e166939f8b47a621795d7b92af0252f05f8099754c1aea49b21de6a4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:ccbd1113112896802e019e335991b26bfe43d42ef8287967ff92387db0db554a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:9cb793bfcc57c9cc417be2fdf5a187d95081e4798d91b9d5c302c6c6a1a7b4c9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:8f0b14dfe1e9125e1a94ffaccd20dcd27fe6790674388f4b218e28fb221186fc |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:9bdd13c093fdf0d8122e31c23750a90663c492b74d46577cafd2181b4107135c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:b8800d311a086a3e31cdfe725631cf3c91cad31c44a5d9a9489655aeef9e91d9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:bc51e49e7c4641df4611c295dbc0b852caf705869b558b9b2a5c01ee316714fe |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:f4a570dc57e034916fc2e9ed752c8b1f33553f9f872c5ee6fd3c6a478da2fcb9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:baa008a9132dff426beadd44fbdb008153b66a8d549702c33b77f77e0a3cf161 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:53758c4b7ed9ce2400c3d300868b83454375319023bacd546fd393c7ecb93ce3 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:85b0423182c49193155555c132d50c289ace6024b217fe99f7af707723bfc7bc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:f06a225955e4ac08f353e881106042e1c70bace04e7cdf05d182e9b7c3f4854f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:fe636d820e6b05c1f9f60dd27190c59c8ccf1a621a0d6523ab4c910f7c132d2a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:69dc861a274848d63cbedd5cd7dedc14571a7d8001c0bb477b5ba7c09485a468 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:66be9b33ad81adcbec7095f93ee4729df43dca55709cef7ef152aad28a4ef64f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:ce8c575bd3155332892e886478d7ed4147980769b9a29c92ed2022d9c27455c6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:cf1c1719febc7f3621058d6d062093eb5f852db41b4265e07b538331617ab676 |