Sign inSign up
AWS SigV4 Proxy

dhi.io/aws-sigv4-proxy

AWS SigV4 Proxy 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.13-debian-fips, 1.13-debian13-fips, 1.13-fips, 1.13.1-debian-fips, 1.13.1-debian13-fips, 1.13.1-fips

Index digest:

sha256:d275ba669b3b99ce420f3b6340d1ec13015004507896adada6bcce68bec7351e

Manifest digest:

sha256:e06fae71c259c1f361ae5f4d44fb9f35194cc6d02abb507089d43d79645d6130

Size

12.96 MB

Last pushed

1 day ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/aws-sigv4-proxy:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/aws-sigv4-proxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/aws-sigv4-proxy@sha256:336b157f361ddf784f6b301228356f3d312dada1d6125635ad513d5b369e3567
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/aws-sigv4-proxy@sha256:023e06e06a01910c2a86b6527afac2e06090e0ff09966aa285728bc8d4ec8ff0
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/aws-sigv4-proxy@sha256:de0ed86a2dbd411faa64152888541948f336f29b5b309119112023800532794b
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/aws-sigv4-proxy@sha256:954ad78f6bd800fc8caf86a35ec3bbb5b14a8e9c58d48e60f8eb23bd8d33cde1
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/aws-sigv4-proxy@sha256:d67271d9ebb32e4472dc60045553f5b4a7dbe8ffd7bfab5812c6578a7c0d5bc2
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/aws-sigv4-proxy@sha256:680bccb21e2f30cb9f6e6e8255084167c31e610498bc51d7501806f1500ef3a2
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/aws-sigv4-proxy@sha256:93c6d9b12c3388d3a4a88f65a89d0b0556fda13e9750121a679533462a74cf6c
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/aws-sigv4-proxy@sha256:adae8a6b2fe5c7e1bcbdfb659ee31d59f7aba116460ad0e06c84d4c8abfda13c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/aws-sigv4-proxy@sha256:1d79d96a64b07a3ce3dd062933d713cdf6aae7c74dde5534b62be52c261b993c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/aws-sigv4-proxy@sha256:2dac2e901a56bc7220844ecbe09e1faa5a081761e79864f7e72c859c05dc30a9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/aws-sigv4-proxy@sha256:c30d87643510e1fc1b162f2675be5904e754f1fa08124d759cdf176b5629f534
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/aws-sigv4-proxy@sha256:7fe08b43c7b29d3d7f978694d9690797a6888e799bf17027382497cb39bc8536
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/aws-sigv4-proxy@sha256:7fd704796408df1ca21446906682d651381419e0aec3ee11fcf84c01a47fdf36
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/aws-sigv4-proxy@sha256:9d30b5da02ab63a270b7423f78db7a18c57e858ec8f0f162db5a3d60d53a02ff
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/aws-sigv4-proxy@sha256:4fb52c07ac9bfa90a272f102aee7f2590dbeac291c38e66a34eb672bf3ddd026
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/aws-sigv4-proxy@sha256:11218ffe21d7abc2111539ffea31ab7e7d3b0d35b5990015392355652afda39f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/aws-sigv4-proxy@sha256:98946448131b5202f675bd70e31dca0330afb98f09eb27b254ebce42319d2978