dhi.io/valkey-operator
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.8-alpine-fips-dev, 0.8-alpine3.24-fips-dev, 0.8.0-alpine-fips-dev, 0.8.0-alpine3.24-fips-dev
sha256:d233626025b934189f5923b47442e32c0f81c87ade601108895047d026089225
Manifest digest:sha256:23dc7da029ea19006b6c96cc677111d4219e573d366033384cdc89d39d79dd81
Size
37.40 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/valkey-operator:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/valkey-operator:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/valkey-operator@sha256:b5726a0663c8799a90fa8b24ec06b7564ac703ff43aefaf742b8913d8010d3d1 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/valkey-operator@sha256:c8b0ea1d651eea095d6efc1b93b7b25f66237bc21cacfa1ed259388e773d1949 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/valkey-operator@sha256:aa6b4981c850088000f32a7421a88cbe043a0a90cffd1abb6f6b66f868e84db3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/valkey-operator@sha256:bf4444c75561a4cf8ae21ab90eae885df8e2ea590e6297cb176a9eaf66fc30e7 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/valkey-operator@sha256:96af724e3787b5ddfde8decca18b65017e31d5117c25f39b6cc82fc3ce05b565 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/valkey-operator@sha256:6fcdb0892d705e314e4b08f34d74d27a8841834f2895909130043b36fa6428cc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/valkey-operator@sha256:14ba9e1aa7de196e61607ba8010b83384c5fe104ed24133dc173604d3203beda |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/valkey-operator@sha256:6449dcc47da533aa11ca9d565dac0379698e7c18b072b30a1daeca4f1f1ba88e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/valkey-operator@sha256:8abe04eafeac0c4572f4bade7c5e1264f92aa9cea2435cd0ec1c7de80e06e972 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/valkey-operator@sha256:ef3324209f3fe9670294a81c3de893cc6d68570288a7e17c6a711ac9443b96b4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/valkey-operator@sha256:141923fc66a03e70d5391b3a32a054c1fee5a01d3774c4334772546b4c4ed737 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/valkey-operator@sha256:f5e283e03d2493ee2115f0d16ddf14554e37c5ca9d8d8b5991a3b66d4165ef53 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/valkey-operator@sha256:62181324ca07a6847e3774693f5dd1c660e7c56b1fb819a2dbd8006f35e05c01 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/valkey-operator@sha256:6b2fe48ab096107428ecd69accc25fcdd2d282356d465f38018ad009473fb848 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/valkey-operator@sha256:f41ada8643b113f6b808a4df35ed7008ceb8c5ea304d141b37f0193da5e7c783 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/valkey-operator@sha256:6683134ef5c3ef761dba5a4dce2ac72900ec38369f01be0ff46a58ab3addc5f6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/valkey-operator@sha256:6dcd975a8beb8bcbf1b6037413a74913c725e00d74260210f431215d8128bfda |