Sign inSign up
Airflow

dhi.io/airflow

Airflow 3.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3-python3.13-debian-fips, 3-python3.13-debian13-fips, 3-python3.13-fips, 3.4-debian-fips, 3.4-debian13-fips, 3.4-fips, 3.4-python3.13-debian-fips, 3.4-python3.13-debian13-fips, 3.4-python3.13-fips, 3.4.0-debian-fips, 3.4.0-debian13-fips, 3.4.0-fips, 3.4.0-python3.13-debian-fips, 3.4.0-python3.13-debian13-fips, 3.4.0-python3.13-fips

Index digest:

sha256:363b67388d577b7254aa607be5d395f3741473abf4c330905043bb5c3f127dd6

Manifest digest:

sha256:0d64f1105c813ad9644cb186639c6d12abb341bcd9478a1c8dcdf9e51e45d986

Size

351.31 MB

Last pushed

1 day ago

Vulnerabilities

0
1
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/airflow:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/airflow:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/airflow@sha256:600cfabd5ae6aa0f5b90d23b691272207f07a8cda470e4cf22c9c5cdcfc9b41b
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/airflow@sha256:899fd6c02c3ba93395ca80c95d6524a840b6bb70cc60713fb7cc5da288cb9db3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/airflow@sha256:700e69adca144425ea2d0e583073d8f3fc597100ccf1b92181115791184e0ebb
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/airflow@sha256:dc5c4e54c43ad972e23d6dc7394055d199ed3e49347656c2c183df6d1c55a201
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/airflow@sha256:77f34acd27a237ee21c47bf88349a560b830db65d4bc7b20935b53444a3d6513
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/airflow@sha256:c52bb6dbe95c1a6bb294647804b55f662e582a73890d551cbf799156b2870471
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/airflow@sha256:7af9d5c7f1812d82d293497ee1c6764f1e78794a67c97cf5237771fe541b4ad8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/airflow@sha256:0728e498c9cafe9b582d2f7559ac5b5b252d7d36f59362cbd183da3a3c103376
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/airflow@sha256:5e8e02657bdefff29bf0129c0c6ead6bf934db43206cb77a933d65c84d0c541d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/airflow@sha256:341b474e12e790110e758162f58496dc67266226543458af876d5a931ee14c4f
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/airflow@sha256:6b5bd34a5fa1e6392e3e6e57079654229ef4ba2df6cdc015fb6686cf2b86abc4
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/airflow@sha256:6ae78e2cb0525fe83f77b5b1ecfbcec6a66a16ebe236c812dec3045afef4836d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/airflow@sha256:289cf082859d406bef9a72cf72e7aa3bed3af05efe6222eb947a20103474a2f9
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/airflow@sha256:662af616889313e3985f8ba934e400c56fc38fb7a42008db15cfca0fac00f512
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/airflow@sha256:1a75edc1a27b8decd60b9a663e9ab2195f78fa38fa6aedcff25d7e6bdc5727c6
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/airflow@sha256:3b5e3a9b181b189fc9e05db3ef5c72c965da9fe2f4d3406bd1091950a26610e5
SPDX SBOMhttps://spdx.dev/Documentdhi.io/airflow@sha256:b186093531742a05f959aab5d6e8e085664450890a3718e30dc32650b6af4998