dhi.io/redis
Redis 7.4.x (dev)
7-debian-dev, 7-debian13-dev, 7-dev, 7.4-debian-dev, 7.4-debian13-dev, 7.4-dev, 7.4.12-debian-dev, 7.4.12-debian13-dev, 7.4.12-dev
sha256:2261274a89c63fc374dc3899066ee51cb5a84452fee7e169756940988671fbe7
Manifest digest:sha256:646efaae4922375a35499aa5d62347fb8ca7ba12a27da94acd7eeeeb363505bc
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/redis:7-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/redis:7-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/redis@sha256:02a8609312d6b50a5610b2017da81ff8369c216a07125bfd602d4c81b1b4fa2b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/redis@sha256:d7d2e287207318039c9915056bde8ddbab98c2f0b1eae3b607d8d512c8add22f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/redis@sha256:b2471a1d3f4b14d192e6171a57e5f2efe050adafe98c5e61524c9f93d4d6d38d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/redis@sha256:a52288bec97ec41d6f8bce0c9f4581011cef19afe95d1a893174e3fd5a8920ae |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/redis@sha256:98bbf2d251909e16e23e3749d86ce7a9385f4bb7084d5b855ce9b19e87eaedd4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/redis@sha256:ed937888e2041326b83e78379905c82aee4440346e975c8eee78813b7ad713c6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/redis@sha256:bfbfdaa471f4064fdf21cd18cad6552149409b279377df7abdd7113391306a97 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/redis@sha256:c717edcfae8ea7de862d4f5eaaddcc1f1b3c03155a5089abe0429cb586a51d19 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/redis@sha256:edc967ae55e6882611df1a0541dd90e14f6cfd30f2bf24ea7ffc756d353ecab4 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/redis@sha256:1f7c71831101150f4096fd36edbf483b65654f67b1bb144c17bdf205ab8cf634 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/redis@sha256:d0bd5b47a3636cb98183640ca7461a3b0b1c9a04c572080255a775b809b42786 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/redis@sha256:04ce3f2665270a085e217c6199e2d553907111e32f6c85cd33f9275fba4ac653 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/redis@sha256:95e16d158ec29f2ae1b824d825235a3280df4d377eea11e3be4d8f7fbf85434a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/redis@sha256:8fdd60f8ca9bfdaf5ad0df532aa51c5cc3ae05b700a807f8768d6534feba2e30 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/redis@sha256:cb0c05b33944168be6de15ec68168b01a759cd305bddbf479556133d83946562 |