dhi.io/blackbox-exporter
0-alpine3.23-fips-dev, 0.29-alpine3.23-fips-dev, 0.29.1-alpine3.23-fips-dev
sha256:f753b8fc52a1323995907e52d3f88d18d08f99435bb7503860dd556c6418b1fa
Manifest digest:sha256:bd98e4160edbf7773bc4eea40b069d37b2e453270763758e6ba3c1f9ccc02991
Size
19.69 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/blackbox-exporter:0-alpine3.23-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/blackbox-exporter:0-alpine3.23-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/blackbox-exporter@sha256:67ada84570f6be882543faa5bb2f9ce5aa231db66ffa19cbcdb64556a291a91a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/blackbox-exporter@sha256:ec23e0b42847f03c8fc97ac4abb3fb2f4fd693a74c51ab033772e4359b8af1b2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/blackbox-exporter@sha256:d273ba178d35c7edbc89868fdcbd7b3299e95f0501ff650cfd4212e99369ea2c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/blackbox-exporter@sha256:ed94f9204addb25eaead9756101573fc7a74e613b8a87f63b61a27e626053253 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/blackbox-exporter@sha256:1c135155b6a3e2ba5e2a91dbe21bb139820bd17792efb6c2833e8d563a43ac94 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/blackbox-exporter@sha256:d5f6827c207f47f5f1b2868939bbf9693e31cb3d71dd98930eed39655d9b216f |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/blackbox-exporter@sha256:d9c336a45e39c879e5e8d1c0be7e1ec336de78a2b7bb906a2afb32a932789681 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/blackbox-exporter@sha256:a394bf09c7a774ffb378d53c159984911564c7b615ac0f8c70ea58f1c3a8dfdd |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/blackbox-exporter@sha256:5df19eda70a2f2271c9bb77f9a62060faeb8653d11f333d595d65bc529bf0a11 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/blackbox-exporter@sha256:f20ed9353889706f5011af845eb3bda02a7e06932bec89416afaef047202c7f4 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/blackbox-exporter@sha256:7be4f77cf567b591dc063c547a745d353788485baf66c494a643b5c84fb8360b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/blackbox-exporter@sha256:da6aef8fc338d361397d5efef9347e1d7242debe88298a7e16866708871e324a |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/blackbox-exporter@sha256:3b97bdee992ddf5ca0221c7449636afa7289c0514cf314f2cb66c6c5a775d900 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/blackbox-exporter@sha256:252180c8da29d4cd46e564a6b5810b20b1099422415c2c5de60f333193636f34 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/blackbox-exporter@sha256:fcfc218998832d39d2a8cdcc8b7c2a4591baf7dc03a50e1b45722e2d229f320e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/blackbox-exporter@sha256:5051b57b08b4529285c1907e36d5761964af404638c100b3a644b71f0f75c6f5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/blackbox-exporter@sha256:940935467da5129403761a64cbb6b5b2553d9497de00394ac6468a660dddd619 |