Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.3-debian-fips-dev, 9.1.3-debian13-fips-dev, 9.1.3-fips-dev

Index digest:

sha256:9cb0d3e1cd8e2d0c99963072994c24e2b92dc0c1bf3b47af3ba6faecb456e8f4

Manifest digest:

sha256:fd1d13ffdf922b40b911534f14a8f97bedf156536940467c53eb746a7c3d64a0

Size

77.85 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
1
0

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:0669359e0aa350fe0191c96d26c833029d419982cb45a72febce2c39e305e7c7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:e1174076b8e257b09c49d98f8774040e28ca4329c1ace9c07bbeebb02deace02
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:742ccfd757c87bc802cd1302c6851f9431f843443312767baf6f7add909ae9ef
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:a8116188867e1fd1b4c68a62df36400f826eceb0416fe301e298bf2e2d3b366a
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:77c1b7cc488520f9daeea87503a7ce09b08e37a28a2030ac6d7a1fe900eb5239
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:88ce62c94a3b2c435e3a8c54b5c84d3d057eb2aad16e0ce7e5a22f51d9ae3076
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:b69f935f69bd4f6f928a43618fadc46ab57e3ca555d2433d68896728f592a88e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:6c9f786e089399424ce4c4ec4219a1ac5b5a86c5fcfbe4f6bfca5a53f575db6e
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:e027204b84702a32d43a52175232694b0e47ef03b0344e135090f5fb12b60f1f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:43d005564fab7da27144ce69041fb31b819797439602c74eecd5a37d8e954e5a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:c977b51d1ef0a49df9c277b695db50f5502238a421c4787c427f762f7acdffe4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:66261c43a343efe3c43080e37e2214bb3f7e417b1f6e56d4d463c89fed4ed530
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:7a1c8df7c11d00eeb0dd21513fc4c5da04c64a9a598ced221ca709d29e7e1d97
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:221535c6779c1b61439f660f78c41d99301431e1b7834a0ce1ba802e026d1ad9
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:21da58c1e675af63469eb83c244d25d615196296a127265df72693a658a8cc54
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:97d25d2f8d9a559f981dc4c7ec7f99725e0e4831a08e389879d29482f041dcaf
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:5c392ef532932678e288c89f1c8706db7418a8d59e4c19352567fa09490ebe72