dhi.io/openshift-console
4-alpine-fips-dev, 4-alpine3.24-fips-dev, 4.22-alpine-fips-dev, 4.22-alpine3.24-fips-dev, 4.22.19-alpine-fips-dev, 4.22.19-alpine3.24-fips-dev
sha256:1d33179f02d46996cff9bbe549c04a8be594d7a827a7f040f8c9ae5744367aef
Manifest digest:sha256:f0d826de8e30f530eb3d89b75010b63c48f6ddfa095a1b057a96a91593479e9e
Size
64.54 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:fa2d7849134f391bf2ed7c1e3e92cf95c86408ca09380c4520875deadd6b3b74 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:1187960ee77f2bb9ce7c7e07ca5b8e08d1bb4fd7b5540d6497bec2eb6b3bdf5b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:1bfff8699cc423b5cf73334e6e415af2c6586ec7fa01a84743b65075f184c6f6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:3e3711ee92c3876d31f8ea87b9c9801c8fa768ba5642d366d59e670029f4ce4c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:1ebded28a4bd0d74e28f564a377aeb89f901d24c53e117b80a241ceae81341ec |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:3f6e5a0726a1c74bfceea0a095bbb4a227fc6e409b47bacc86dfe24384dc6497 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:d42ef1b7009f976d078ff75bbc3cf9e5412b5ebc336db31a7e78c74a6a88b1d5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:1471bf491b7908b92e34a8125252816b13ae12efb42627f80679ccfa0da80754 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:a4324393f3d748f23e914b3fba63ce602f14cf64041ee61d3d64c853b3687853 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:80808524f43c9805a92de2d542b14820e8e9475c129cf33764c85adbd26740f2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:7b9c9a26f34c7d6658baa8410aff868acdf1ba8a8339d1e7cac1a73f8ef78ea6 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:c33a27c91bac276fe366fad974c948f5a987e57248f15704e8ea7634bbc7f38b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:962984aa6794e7502f8316c16e439790dc2f3e47fe79f982928e6fc5d33b5e56 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:e61c413681583bf9943dd599571e49d820a0082dd794f54d6cf8989206b1793d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:8437511dc86c002173ccc9f9e633dfc5dafd9e1316d80ba299a9892f3f662c36 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:4202a28d09fe23967038823b9ef912822981bd49ad45b7cfd6c8514984e7d1c6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:b9fb990ba96511936a259c9be7ab19c701c7625c38a810c0f94e8f169ef403f8 |