Sign inSign up
Logstash

dhi.io/logstash

Logstash 8.19.x

CIS
linux/amd64
debian 13
Tags:

8, 8-debian, 8-debian13, 8.19, 8.19-debian, 8.19-debian13, 8.19.21, 8.19.21-debian, 8.19.21-debian13

Index digest:

sha256:d0cb6c74af1b75921dc32bae00ad0b44f1c79979d83246feec6c7d1e277dd5bd

Manifest digest:

sha256:f020793e6961840a530208d2c7a18369576680c64c69619b0b5c132ec5d9b641

Size

412.32 MB

Last pushed

15 hours ago

Vulnerabilities

1
1
4
1
0

Support

Active until Jul 2027

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/logstash:8

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/logstash:8 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/logstash@sha256:e5d936340e70a01a181e37e8fed4e1258fb9d2975f853afce9c430b345f5b307
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/logstash@sha256:f05d050d3875b2c1847128152201af8132d4ee7dae6f4a4d4eb8a0fa460f47af
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/logstash@sha256:33edd0f01716140262249f7c07cae52aff1a63e94f94dd28836970964d2f8c37
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/logstash@sha256:4787f3fe78c6e4e2ebc379fd02107f32ac55c30dfe5bdda01db905f36cd993a2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/logstash@sha256:2d02a8b217d926db41382ddb6cb8b6d30cf07b7ca3fadfbe1c3f30c8779fd460
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/logstash@sha256:d32da1302b145917ea392862384e94f1dcc50f26f690fff3705f3b38e4673404
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/logstash@sha256:39381e368dbc639dcd9bfbcd8109e16130fad62b1416b8780a68731ef708569b
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/logstash@sha256:bf680a1c2c2e8f28bb2f31d3426b7d2bfe902f5195c5363726a8fc2c833c6df3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/logstash@sha256:66b50181cf6ccd19cdfd495d67ef35a39f73527d5b1536c82c0e8192a5ef10e0
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/logstash@sha256:50b32085ed1ea07eeb8c340b54771dbc86065c74cd0890127a9118021b24b4a9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/logstash@sha256:1f0f87d23707f199fa3b2e4be4c44e06f3146b71cd36a0f9664cd5c6d21f7ca3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/logstash@sha256:9882d30b833a5de69c55a9415a51135d6684690d7ce30a4fd46bedddc35155c3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/logstash@sha256:27dfe9fb3a6f502a68af71a81c0b4bbf1e6507032727d64cb7e6eedaa1d64be9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/logstash@sha256:db84defcdb3dad87cc377a334ba829eeb915ebd94f21099281a4a665d5a385c0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/logstash@sha256:79af60760d911a5681dc93780a279c2b2c5218824fc491dbe8ec500a5937cae1