dhi.io/configmap-reload
0-debian-fips, 0-debian13-fips, 0-fips, 0.15-debian-fips, 0.15-debian13-fips, 0.15-fips, 0.15.0-debian-fips, 0.15.0-debian13-fips, 0.15.0-fips
sha256:834327d5bc5f3d47a034091b6fd9e3b0cdda8c59f87c96e6d82698032b697519
Manifest digest:sha256:6594b4f1d4e251567fc494f0197ae3460fe61006c96b7a52c49c4a75f953cd33
Size
12.64 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/configmap-reload:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/configmap-reload:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/configmap-reload@sha256:0dd73025571e302d2a225e000c76e98a18e996b33283ac2590d1396ba07ec902 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/configmap-reload@sha256:d0fb36d82a96266ffb010d2870649ea7189b17adf9690cafcef39bc9f3bbcad5 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/configmap-reload@sha256:de3d90479a1b00999eeecd3d3d77a952f24feb2a4c550ef7deada123f85cf352 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/configmap-reload@sha256:7607b7ddbd7304c1b20ca3b101661ebc07c4995058a07e603a3b1b3302d566b5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/configmap-reload@sha256:2badf43d74a564d8d53ca0ae16c7b8dd53cfa575251ba1383893e3bdd8193d99 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/configmap-reload@sha256:1cb9c747b972e4835fad3e01d525a2a97e991c793d4e1684ae5d5423a0946a8d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/configmap-reload@sha256:c3e0952c6a78e4a47d45dbec10c797a03c2febe0f45417614d29b54007bde908 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/configmap-reload@sha256:6f161c450455fc5af29f399819671703bc90a85905698fb4454daa11f78b737a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/configmap-reload@sha256:1ec891a342acfa7486e07859b8d1492523fc1e8eea0d24272ebc5b93009b45cf |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/configmap-reload@sha256:03754afca0182955f22111d9f402ed145e0b7e0aff5c23378b6fa9d43ecfdc17 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/configmap-reload@sha256:87be5738cdf4afa2c6ff726e00c483b3ffc265b941f7482cfe2459e487dcc051 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/configmap-reload@sha256:efbf889d1a8c0197b6012738bfbdce80b4888e69792dd7c1f8e07322ab8c570f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/configmap-reload@sha256:289d1bb87d60ac33d4df74df7aca76861567d053472bfdaf30c8311dcea3118b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/configmap-reload@sha256:c42397cc829a901ee1ed537757e32dc9f55a159645efa73fc27420ae245420ce |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/configmap-reload@sha256:05bd70fb2643485300696d5c80f37ef27d9cca879be3282790f6b7e3496ee3bd |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/configmap-reload@sha256:9f5b13ad57b0d8303c6a223e59fe52e14794b9b8f4f10f979fb13462750265c3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/configmap-reload@sha256:6ea033f752c20ba37384c5478208198935d7bdb901dbb7d4db262d29eb981845 |