dhi.io/rust
1-debian-sfw-ent-dev, 1-debian13-sfw-ent-dev, 1-sfw-ent-dev, 1.99-debian-sfw-ent-dev, 1.99-debian13-sfw-ent-dev, 1.99-sfw-ent-dev, 1.99.1-debian-sfw-ent-dev, 1.99.1-debian13-sfw-ent-dev, 1.99.1-sfw-ent-dev
sha256:8bdb25afdd316d5edddfe463bed51c8dd28bbd638bec19f66a0e67439a0f8bb1
Manifest digest:sha256:2a37830b7826567eba0c83d97762c5e59dba98c186300641e34a5a020e45b2b7
Size
385.44 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/rust:1-debian-sfw-ent-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/rust:1-debian-sfw-ent-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/rust@sha256:73307a217a79b0a773aec2335b2276cdffec2dce5697a8b6cc7a3d169cd4b786 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/rust@sha256:1ce9cb672f7889dcecb083e73807054f1e07b65cfd0951cd628968822c511a81 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/rust@sha256:aa60e4a1531287fa721fa85ef37ffef4130db0cf5cadd34a0b5cee7bcf7b0dda |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/rust@sha256:2e1a81ea2360ee12233a8d419856ef6d433d87cdd4c0d789e64bb06e594e6263 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/rust@sha256:a593a9238f8d3c4f196afbb1b7d4cd4d960879bc389517ee905e531386b96aa9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/rust@sha256:8820c6671633e48c930184d4496b858fadbb2481645f21bb209fe45f5469d815 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/rust@sha256:ae71ad9fafed6957bae521ce4ab62765dd5c33a8520f4b57a1564906656381e1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/rust@sha256:111530cb1c9fb71eec183491287c21b908c9c5b024a8c0221cc24eac21d5cea9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/rust@sha256:fa64d32b79c4abfb609e88a6754ee53231a50b2d3cc04a13e79584f6eb8ac8cd |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/rust@sha256:f14183acd253f9a35c9509077fec146bb4cc414466bbaa0f3a7901cfa4d39e22 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/rust@sha256:f072a495e096691551d91029b5652284a14f353fa7f30678e72e083dd6b64bbc |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/rust@sha256:1f7436c9f9a2a510f738a27bd971e10efa776f2ad8f14972a76a762f770d0c56 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/rust@sha256:43919a69305104e3b33a15547cb7f358550693f13c3de819e3b92713c4f4974f |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/rust@sha256:c23e262a566730f3a22f4e7532e2df809198b0e81db58dc1250c2f14b2341aad |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/rust@sha256:44f3650418e9942bedf1fc00001d5758abff17a86d3336bd66c88a67039c4431 |