Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.3-debian-fips-dev, 9.1.3-debian13-fips-dev, 9.1.3-fips-dev

Index digest:

sha256:527a12093095f0f409030bf9b26f37a45460289ec2eb3547a84dea05129ab3d5

Manifest digest:

sha256:11dee92dfeff1f7eb8584cd0d37fac99f2a8aabacb61d3688c038468c2d76f32

Size

77.85 MB

Last pushed

20 hours ago

Vulnerabilities

0
6
7
26
0

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:daed529b350ce5ff5539a5c173d3dd3dc474ec761b71446a3295154da0c7cc0e
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:cca61c2a6b6d35176cdcd89b5f65511e40ab30ba93a8eab05d3850e0278add68
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:c7c2cdc5740feb8bb2f2a5971a0b4c51856e52426b3a8a942459899cc22da3e2
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:6edc6dfdab8018920ca4d8d7761953812a31462ec53a661720c7dc9873c18b54
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:30781619987cc2981b7bbf6531bb9f5e9d0e06d5e337852125492e931261a46b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:eede90708de3c7b2e3d88a36c51fbef794173f3c37c9b0a5c1cd089194b1376d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:00e18e1883f3bbf9b9bbf7b5d6c883339ef64aaf5c30147f5f90f2826e508c78
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:a6cdbd781ef5c19ffb5e0cb842bc2c011cfc6b802c2298dcc2a14ff06888c56c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:3129bf06cba440c0a5ea2c688d8e3534b921524519977a9cecd259a6eda64c9c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:03755a2402e21f151bda533cdcfeeb3e1ed48030bc98d257e23db4c41d374e3f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:09d3f15b096de9a8cfeb9b7f9434427fa049d23ead97ffa1b9d82b4187fb46bc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:43acc6e875847d471b15d30f8c6eaaf9653fb7cf8ecdebdba6082b8822e1507d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:badfc2fa2acc197cee212d8c5b649441775021cc441398095eab16baae06c85a
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:2a9bc7b5d1d9dfd76b027be9f48590b525279cbedcb2508d787dc0bac337b5cc
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:96b4384e26dfe4fcf9bd8317caf61eeae7ee6e152e8bb5d38e2896c540870267
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:2abc82b42ce31085488e069ad63208e897af89a8043bffd66e91f3d482a3d24d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:067fbe0fe9910ce89d6912792f71a3ffb21d8d5b58c39c0aeb90c4bccd100f31