dhi.io/node-exporter
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.12-debian-fips-dev, 1.12-debian13-fips-dev, 1.12-fips-dev, 1.12.1-debian-fips-dev, 1.12.1-debian13-fips-dev, 1.12.1-fips-dev
sha256:4a75fec8eac62f21975f18bf9bdecd3a3b4f1775e4202165507c397a9f1c91e8
Manifest digest:sha256:c2a764c0cf99eae28f8bf5d17f5afbab345f662999457c06ff4abc04db756f29
Size
35.27 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/node-exporter:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/node-exporter:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/node-exporter@sha256:5a667d946028a56ac6937fab7d818cfd4728509b2e5d3f0e9aa9f0cf19f08070 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/node-exporter@sha256:81e0a0c6e6e6f4142e877909022050b220c46dcd2fb520ebfbac6d4a6ff51a56 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/node-exporter@sha256:a4615baa7bc42ab7f9ce1c40018e536fb60d3c7d47c97bb6ba23b0a9b9fda6cc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/node-exporter@sha256:6ee46cc79dc561390702dbe27ef0b148176e22f92f81305306b4a3e0dc95f9c2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/node-exporter@sha256:b58fc9bc0a84d07e43676794154bec1d0c152772f6e0788175f7b16180e57c6a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/node-exporter@sha256:45e5aaec9fc75e28b8d489ed8465a772069c308ae82feb55e4d4c10be37832cd |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/node-exporter@sha256:27581f95c44b8b23128ca4784d850966a149f684e9f0ea5e537d02b7dc0ded35 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/node-exporter@sha256:9fa731a74c669a75c0ce4fe820539d1ada1e88f2d84f0fcbe933aa207499a9a3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/node-exporter@sha256:079614afd87beaeade109c06a6d17ae69187f23ada6405291eef15f8347fd7c1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/node-exporter@sha256:d85ff2668f504c397477a2ea3bba776c554676b0b1ff7b57e2a70eda6537ef0d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/node-exporter@sha256:fdde0c09d27edc3fff778ceeb7d36c6593f8011d075f331cd8f2c3e14dff751b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/node-exporter@sha256:094c7c3d4e0c5bba10eea16499999f3ad65963a719cd2b91db25749e75e4e6ee |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/node-exporter@sha256:598146fb169435bc7bee5aed16a2bdc7c57efec4f4b03ead3e4ce9cd83c90ecf |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/node-exporter@sha256:26c8233a6ba48db1a5f426e642fde2497653ca75c307ad58475c3e922eaa1c90 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/node-exporter@sha256:61be63d09bee0135022df3e778db898231e33c6ef68e4b8de66f1a994b6c4a82 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/node-exporter@sha256:4ea4dde699c562728f75c6b38896700790ee130d7a022db3eb4d2011dbfb586d |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/node-exporter@sha256:89392cc64271ac6094011710f06f0edbb2bbb120ce2ddceba2f9eaebe641498e |