dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:b53555d2b82d3ec9d162bdca1295c91c9fe9ef6dd717517bcc6aba78f4405f37
Manifest digest:sha256:ec2c9867ee71ebc2b98255e314b160a4d6ae7a0d5fec6860fbd1e38373c3b74e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:83df3a4369bf9d7eeea6f98283aa49b1e70567a65ae8292a1003c9c68ff8cb54 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:397ac4d212caf7d941f32914d60e792516ee89500eb4052d25c8653176c66d33 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:eaef5ec4ab4ef3d6b57e64bffcae31d483e32be8570e484a6f3d8bc6c7ae8437 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:0265108b6c798b8242c5059b157100756b49b4f1c539d1e737d5a7855d03040e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:a2d6bab04fa0b3d3016e18ba3a92245802207a11b682108c8f1c139f11e0dbc4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:f4c70e047b31807c61e537ff029dba10339a8238eab92cab7af3ed874cd7ede4 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:45560d0050458b4834e1f62446eafd832d7a77c15dec56827820f364c95fb85f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:684cb4e161c041cab159941e10a0b7c4effcf40b0977785682c53645ddebcfff |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:8de9e771855660565bac283271dbd1fd2d061e065891931672aef0dcf45a7ee1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:aa2e62ca36cccffb0899045e9ea896d182db2d2688095d27b23af9b3b63021ae |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:e90397038c1b004764958f12513709a8470b238436007d233470fbcb181a4671 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:afca9e1f240e76ed88625f511ba3ff9ac39223d0524dffc1eaaf6ac2a5f23b08 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:cb2326834ac9d7d1098c09729a37635e0ee845607842d3276c440c01e8afc8f1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:53f616e9cdd0cba321de8232576dd12d91a141ffd85cc979f020d2410d27c30c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:a1d366b8804bf2b59ba41503ef0f024e4a449825bdc9bb032fb2768e5f8ace7a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:e4493ab5887c108c5ae3fb9afacbbb936639d07bc1c8ac3f95de7338f68c98d2 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:424b64c5045565419c76bc1454d1d463d438f88a6fac717dc07ba4e5e960d8c9 |