dhi.io/strimzi-operator
1-debian-dev, 1-debian13-dev, 1-dev, 1.2-debian-dev, 1.2-debian13-dev, 1.2-dev, 1.2.0-debian-dev, 1.2.0-debian13-dev, 1.2.0-dev
sha256:106709ea2d782b282608cf4b9066128633fa469eadee8bfd7612ae55e186e332
Manifest digest:sha256:ac20d8fc3d66fe308a08db0e5bad1caa65b2ed46e3522b75ee64bf8200e784af
Size
240.34 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/strimzi-operator:1-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/strimzi-operator:1-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/strimzi-operator@sha256:1648383b10e9cdcd021e6c795af0968d037d09d4d01b4e04125f397e16ee038f |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/strimzi-operator@sha256:a274a3ac553d928ba8a6f42e872da690c76156787e152098a6e4797cba214857 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/strimzi-operator@sha256:26072c416a9fe80eacae2bfec5bbd805c39d176812bc38c30597631a84b4a121 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/strimzi-operator@sha256:217a72c9f77fee57d4281520ffd25b71aa3168047df77f7bed8f1cef85244313 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/strimzi-operator@sha256:4cbd902ed8dbf2b33afba63e3df5bb03c8c88f5271a7f0e05f307edc2850475b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/strimzi-operator@sha256:9154c586f92e8e2c8b7315191423891a0c7d48bfab6e19f19979a3be8386ded3 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/strimzi-operator@sha256:858e55d29688e4eaf5e3b12a69dcb0d4a3c31b271cfbc69493e7016fbc1bbc7f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/strimzi-operator@sha256:37410fa899990e72af83ff213531e8d5770543064006b61eea833baf5256177b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/strimzi-operator@sha256:71a36ef8f5755801afc8b0f87b12dcbfa7ea4a3592d50f49d7a75e71d25468fe |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/strimzi-operator@sha256:f34d84c12a54fb611ce97cd715cd7ae251320cebfc74b9e41f4e35a09be49720 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/strimzi-operator@sha256:9ead5484e02d57ba25c5fed5ff495e84eba41169bd8005ede9ada5ad88c02176 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/strimzi-operator@sha256:ffae0030cf060b6c2eb597d04b12e103385e5e581f0d8338b89260cf5f8e65ef |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/strimzi-operator@sha256:1274d38053f062772e4db651611adb88e358c79352d9641c27dce0bbb1701bab |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/strimzi-operator@sha256:3747fa86183aa4e44d11d7eb014341b37f5d8052179a7f41a1c9e6fa9490ad9c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/strimzi-operator@sha256:0f9b0e280e0f3fc626fe64d796892c5c39bef699b16495ce9b310377828850d8 |