dhi.io/python
Python 3.10.x / Socket Firewall Enterprise (sfw-ent, dev)
3.10-alpine3.23-sfw-ent-dev, 3.10.22-alpine3.23-sfw-ent-dev
sha256:33cf535d79db5d3bd1dc20c3bd8b759bdfd654cdcf761c6246d696a83ea2bbc8
Manifest digest:sha256:af18dc011bfa31f62354ec24895917c65f3e60b2be1ae1fe036cd3198382e691
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/python:3.10-alpine3.23-sfw-ent-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/python:3.10-alpine3.23-sfw-ent-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/python@sha256:dd265020a1f7fc34502acf7d10f1e8af82a216db991b61341211a35de2968566 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/python@sha256:60bacb3fecceab5a39462f831cee6601fcfae9292796f7bed87b6c9c33eea6c3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/python@sha256:cc6feaac3fb05ecd9d3cf8dcaa02cf8a3c84be6261dae54b24415cd9007e5562 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/python@sha256:6c022763eaa70a39f0d671fda6407561a783c11ef4edaa031a259e7c4ebfe2e9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/python@sha256:e8bef3143661c6cb4127a0474dde202f83219267aa47b2fc5d7bf287df92ed64 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/python@sha256:df88afcaa90c5bb38387fc31852b9962cacbd558ab703f2b6aff907e86d9a5e8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/python@sha256:3bba9f3f2e0fe7b17b5a83843c4a843c286bf12fafa67faeb8fd7a10663a3374 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/python@sha256:ecd08d1ab5a0c0a8f60438db899d34c95edfee90364c490617aebf7b11788af6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/python@sha256:415d41c0429afd8be34401e97cce5a356e7f60ca9e1678cebb272d8f00996884 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/python@sha256:f7b30a94b7fd3d1957ffc059c4f6bd9816267911bac03e418ccdca1df924c04d |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/python@sha256:2530c44350014376d6c5b507d6351374fa596a46658e155882250617a1bef6cc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/python@sha256:0c87260891b5538abe3051b40f90ff23c2bac2282a2d4580683ed09369e295ae |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/python@sha256:6f9ffbca5e83606b2d4fc85a9da1c499ad5bc55482ca41f768c7e7fd51d11805 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/python@sha256:6ea873c6d2068b514054ab7d93bf4c0f05108f9a2b1e79597f4a7bbc65abdbfc |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/python@sha256:ff6b3ac7360e3df9d3b01dfb3dd5dc9530497d135d61b1d05d0603e4476143fb |