Sign inSign up
ktls-utils

dhi.io/ktls-utils

ktls-utils 1.x

CIS
linux/amd64
debian 13
Tags:

1, 1-debian, 1-debian13, 1.4, 1.4-debian, 1.4-debian13, 1.4.0, 1.4.0-debian, 1.4.0-debian13

Index digest:

sha256:212678bb96a95a7da21d50ee0a50a78cff5ad9b25fc1b194967222a8dd6608fa

Manifest digest:

sha256:83533f59c7217d27ea4cfc133330311e04a3ef267036fdd968c9e552c8f6e711

Size

9.04 MB

Last pushed

17 hours ago

Vulnerabilities

0
0
1
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ktls-utils:1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ktls-utils:1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ktls-utils@sha256:8a9171c0a6de716c7b31f9e495ef9c1f4c2aeb9dae034ab3b8189ae75ca18ac1
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ktls-utils@sha256:9a3fe846eb67bc3220fdb75c5c9a33b21824d89480458ad49fc8cab03baca4ff
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ktls-utils@sha256:369ac678881ead8702bee159e6caf94ac389b945a65aad929e482d31cf73627e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ktls-utils@sha256:b27cef094684782fe0acf661d0998b589b335b87a324b12a07da97bb1afbc2ab
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ktls-utils@sha256:e70d779950482ff024f3c0a5e7c18e4953ac9b3de8dd196e2ac6dece45cb8d3e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ktls-utils@sha256:162eebf603291ce640fa3b28d854d4cdd271056f43e0ee24b0b0b920f302cdf2
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ktls-utils@sha256:bc1b1d519b54fb8b5fecc04d88fc9a8620294b20b43ffc1f2af36a034cd85711
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ktls-utils@sha256:17655256f427c00ab8f0b681cd15b7f3293fc65fd9de22c628c09f5795cc8864
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ktls-utils@sha256:c78ee3ef982a14c43054957b4105b4c19170b045c9e45691d9b998c7a1b16e55
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ktls-utils@sha256:f16fb345fad596ec1f5396d117bbf04c6dc43adbb707eca24399c2e57bf3c74c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ktls-utils@sha256:8b8a1cf9786a282f1b619ada8704d3a586dc37dafbd94c7a997370d0f3dd025f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ktls-utils@sha256:9a9f6d87530be48103f0a11984e9f99d1e611c03decb22b5f77d0d62df806657
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ktls-utils@sha256:33acc35399fd863fda9bcf3cd524059de21b7a7b07b42f8395b13c1d08b7c2f3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ktls-utils@sha256:458ed4dccb9cbbcb4f8da1bc5dbc65792a0823413339de19d15017af1ed04a3d
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ktls-utils@sha256:ab25e53490168a9f06d35a3b2652691c10bd3256445c567c2971ac749db3916f