dhi.io/aws-sigv4-proxy
1-debian-fips, 1-debian13-fips, 1-fips, 1.13-debian-fips, 1.13-debian13-fips, 1.13-fips, 1.13.1-debian-fips, 1.13.1-debian13-fips, 1.13.1-fips
sha256:d275ba669b3b99ce420f3b6340d1ec13015004507896adada6bcce68bec7351e
Manifest digest:sha256:e06fae71c259c1f361ae5f4d44fb9f35194cc6d02abb507089d43d79645d6130
Size
12.96 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/aws-sigv4-proxy:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/aws-sigv4-proxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/aws-sigv4-proxy@sha256:336b157f361ddf784f6b301228356f3d312dada1d6125635ad513d5b369e3567 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/aws-sigv4-proxy@sha256:023e06e06a01910c2a86b6527afac2e06090e0ff09966aa285728bc8d4ec8ff0 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/aws-sigv4-proxy@sha256:de0ed86a2dbd411faa64152888541948f336f29b5b309119112023800532794b |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/aws-sigv4-proxy@sha256:954ad78f6bd800fc8caf86a35ec3bbb5b14a8e9c58d48e60f8eb23bd8d33cde1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/aws-sigv4-proxy@sha256:d67271d9ebb32e4472dc60045553f5b4a7dbe8ffd7bfab5812c6578a7c0d5bc2 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/aws-sigv4-proxy@sha256:680bccb21e2f30cb9f6e6e8255084167c31e610498bc51d7501806f1500ef3a2 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/aws-sigv4-proxy@sha256:93c6d9b12c3388d3a4a88f65a89d0b0556fda13e9750121a679533462a74cf6c |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/aws-sigv4-proxy@sha256:adae8a6b2fe5c7e1bcbdfb659ee31d59f7aba116460ad0e06c84d4c8abfda13c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/aws-sigv4-proxy@sha256:1d79d96a64b07a3ce3dd062933d713cdf6aae7c74dde5534b62be52c261b993c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/aws-sigv4-proxy@sha256:2dac2e901a56bc7220844ecbe09e1faa5a081761e79864f7e72c859c05dc30a9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/aws-sigv4-proxy@sha256:c30d87643510e1fc1b162f2675be5904e754f1fa08124d759cdf176b5629f534 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/aws-sigv4-proxy@sha256:7fe08b43c7b29d3d7f978694d9690797a6888e799bf17027382497cb39bc8536 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/aws-sigv4-proxy@sha256:7fd704796408df1ca21446906682d651381419e0aec3ee11fcf84c01a47fdf36 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/aws-sigv4-proxy@sha256:9d30b5da02ab63a270b7423f78db7a18c57e858ec8f0f162db5a3d60d53a02ff |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/aws-sigv4-proxy@sha256:4fb52c07ac9bfa90a272f102aee7f2590dbeac291c38e66a34eb672bf3ddd026 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/aws-sigv4-proxy@sha256:11218ffe21d7abc2111539ffea31ab7e7d3b0d35b5990015392355652afda39f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/aws-sigv4-proxy@sha256:98946448131b5202f675bd70e31dca0330afb98f09eb27b254ebce42319d2978 |