dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (dev)
3.3-debian-dev, 3.3-debian13-dev, 3.3-dev, 3.3.1-debian-dev, 3.3.1-debian13-dev, 3.3.1-dev
sha256:d04e53febebfb7b59c9729ab29a6ddfd0c6434be03935e42996430442a1b7a61
Manifest digest:sha256:ac92f1d041dc785d7c8ef1dc5365c2fb007a28c1314dfd5c2a83c6284e734f69
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:7d9cb41b451455e5a0d068b634bd76a9caba0489616ee4201dcd17434bcfdecc |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:8fd4ba7e490ca3821f17c771296f3e5247a4bc96be471549d04d35c482504922 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:208b66fdc859d0b1b92695979083f0fa67079562f8952664ec5a6b914f86da98 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:680b3c1831e891509c3540b3a5e874547e65f23e2be8ccd201ad53a1c4b073b2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:37699f7535110234b5e91ce9910dbd78c1bd73ca5da1744fb28badbe3cae17dc |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:093ac718e5737d2fcb037f1dc5f37a7d0a8945716ca92756b66d64b264af551e |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:70fa75abec63140339dcdc26fbaf1a84117b69d5ca5c0f927d7dcf7a99140098 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:0bf025a812ee909636991bbbd944929a5d77536239c68a0bf14b5eda15a52873 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:71e56e56777f988317480ca8ad5d11b071bc5ccd0ed6ec3ae60192a50ee092be |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:85dd2407d16df30983140e6784219cec73df7aaf5017500405c8d5e630c37f64 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:495d266c6353ebfc61e476ae76e4b728478e82fa7045bbad9530c48a51bbb8be |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:0db86bf073feab22bda93b70b4f62bc0a4f5c23fbd0e76b5be7298f30b0227ae |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:39ae3fc294cd327c13f0ee7eba2a02c1a68674de7413cb6bd1eab8ba7fa843ec |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:d48feb33b6f71bdb33b4ff7f3e14d366a904e328bbdae0f9ef582b1cc89f6498 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:3c725f5f0f16c1c8ec6ab064ffd118d455774ec7acbf02126a3adb0c609aaddb |