dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.0-debian-fips-dev, 1.10.0-debian13-fips-dev, 1.10.0-fips-dev
sha256:20d5ed1df402de95666e98dd676f5fdda30ea4c2f7fc0938cea8b919eb8f8e4f
Manifest digest:sha256:946e07f529154650f2c71ae6b46d9d876a01ffae2a1bd82c5668ec4491935e82
Size
69.66 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:19248cdb36ea039e16b8c55aac3b98bf678809c299798313ada55b1766632e42 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:249964672469af968ac06ee2e320b8e8646986bfb171a769da4295da9a73a93e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:6d109d8aecad1f04778742d4be220722f1ad572aa96ac66c448bf1a69ed6125b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:45e0338a9afd558635a79d9f4df66bb545ab3bec48c444665711807aa69ee3bf |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:814c95fd95c5870a5cb1f7f02c770b8b17592113dca664a29bd70640a9783ee2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:5e9f53cd380979de4a380a01e4bc51bc7e856b47988c388f792960c1ed513576 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:f981c6ab7ba1fea7107dc695457c6794787ecf444394fc3b1bb843f867dc056d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:6161ccb6b31d96eba7812d395be229945669ee34a52611f05f35f969693c2f0a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:f7d7f3123931e0bd167a34e791e0eda01425ddf5b29fa1287a51d1645d144d44 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:265bddb2e692766de66ea716673017a8d0393e8fa804f601b58f57c7e6f210f0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:6ae7c77532a382e8e77fc9b304a679812c2271869bf43433ff9f46612ce092d0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:75d178e96fedcb837f1ac69243aafee4da75c881a15080f15905591882a53862 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:af4ff1d4738d176e987c35689cde6f07b01fa57dffe33f74f2253e29af5838ca |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:b86433836ec5e4f50ae3643c85d59b253d752925ee5ec51807160028e9d5f13b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:93c3a79e1740a2bfbfc204979fe498368d015e23405528062c3ac71572e6333a |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:7f675adb16206f959fd41a7a77172badfd60c3ea87f3dc76549086b774d92497 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:bc54b4c37e436c1c338916a4384181df079c922899f2a166bd873b88ebaded43 |