Sign inSign up
Jaeger Spark Dependencies

dhi.io/spark-dependencies

Jaeger Spark Dependencies 0.x (elasticsearch9, dev)

CIS
linux/amd64
debian 13
Tags:

0-debian-elasticsearch9-dev, 0-debian13-elasticsearch9-dev, 0-elasticsearch9-dev, 0.7-debian-elasticsearch9-dev, 0.7-debian13-elasticsearch9-dev, 0.7-elasticsearch9-dev, 0.7.2-debian-elasticsearch9-dev, 0.7.2-debian13-elasticsearch9-dev, 0.7.2-elasticsearch9-dev

Index digest:

sha256:c198eaf00ef37a58806288541e4f80d0655e7a3a9a812263a41894ce3bb30b18

Manifest digest:

sha256:bd0149c1d90ff23df75927d90e43a150e1f2ce07daecc22f17b7db1034a5524b

Size

245.95 MB

Last pushed

10 hours ago

Vulnerabilities

0
7
4
3
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/spark-dependencies:0-debian-elasticsearch9-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/spark-dependencies:0-debian-elasticsearch9-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/spark-dependencies@sha256:84d0c3b1f100362564ae30887670ec731cdb98bd49b5cc35b8691d8bb9016466
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/spark-dependencies@sha256:14ebf30358f65c16d6591ddaaa1a230cdd2c688da4ad74d016c3ad0396c5abe2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/spark-dependencies@sha256:c7fd784bb02ac6d59b4793df3ec6673776ded1ffa0c7e2bc20ded9d80e129fd5
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/spark-dependencies@sha256:154b82dcd589dea84221b0bb588f38e5e402c421bc7992e1fff37e6b75e83c58
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/spark-dependencies@sha256:a6e849254bc43739e988a31161267a7144763f4d0329e99658ac6e57f32c3f31
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/spark-dependencies@sha256:800402c7f38ed340f5bdb6c39fb7fd3444d767abd30d9ffdcb1b8b407e9c0a4b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/spark-dependencies@sha256:a111c60803f621cfc636052738cc390ed4b2601700a6673727cbb64bd512e54b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/spark-dependencies@sha256:e9d03b00ea821261621039f373c13abd6f336f18a323c2126cd3ff635ba24110
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/spark-dependencies@sha256:1b4bd140c4c294e568f1ef317214156f1c6d22c833f1aef74876d2b65eb417a7
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/spark-dependencies@sha256:3c1bba165d6d8af16225398760b94936758e4c087d576e40933f4043adee22c1
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/spark-dependencies@sha256:c12eedc137beb71293660b678413ad4c4cff56accb59101b19a4885176231a37
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/spark-dependencies@sha256:14da7beb3bacbdbef516fec18f20db6671e19db60fa35a37d530cd8a42934975
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/spark-dependencies@sha256:8a2f35247250bb4f651e41697b305179ac317fa52da2fe1d3eae0c0c999fb7a0
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/spark-dependencies@sha256:fad0dea3038ed3cd10d808b62744a08cb34034b425b60dd35d5c856486f12e9c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/spark-dependencies@sha256:4f68f04349a7ee7a5f1e49abac331639b71cc3b9049b15be66ffb3ec241c9211