dhi.io/blackbox-exporter
0-alpine-fips, 0-alpine3.24-fips, 0.29-alpine-fips, 0.29-alpine3.24-fips, 0.29.1-alpine-fips, 0.29.1-alpine3.24-fips
sha256:1f69690e5dcee557a3cd0e821a70e21191209810d68fd6f6445ed95048b27636
Manifest digest:sha256:df2a516b860e745f5d4fc6771fd24aae475981d36ecf02f849932fc615b0361c
Size
11.69 MB
Last pushed
3 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/blackbox-exporter:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/blackbox-exporter:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/blackbox-exporter@sha256:1053e1689954dc4b7add9967e1c6dba1804b83351e84d21c745d5b6a547689c7 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/blackbox-exporter@sha256:84fac24b7cd2744db39e9d1ef1e80f4e585fbec7e1fec775b632b755884dcd81 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/blackbox-exporter@sha256:9af6c5c27d43aeab7f4d12df407ec1e3a3f170f033c230d6436e1caa0042b588 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/blackbox-exporter@sha256:7d51db676751a9ae8bd9d3413a6be2a890fc2dea1259ed4b6870f2fbb4b66b3f |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/blackbox-exporter@sha256:170a6e6f38e358ee06ac676ba1e690b5d532b9baf1fb616ce01ca75f93f1294b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/blackbox-exporter@sha256:f822b590898e2012a5c7347072814c931cc950bacf5c8d23c6a5f5a3e6f49220 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/blackbox-exporter@sha256:981c50edefd5b8c067402c7c844302b7e9c3674159fd2f1e91da417b1d67d5d8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/blackbox-exporter@sha256:c0c63c890709c5b2b424862c7b510e7c78f6f6f71f30b934886281029d84aa60 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/blackbox-exporter@sha256:9a7489969777482eed91531fdcff828d1a180af8b5e4660fdaa0f624855e04e1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/blackbox-exporter@sha256:600887790756df9df05b113b1d8aff5a05388bf76e50dab4ae3401bcab23263e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/blackbox-exporter@sha256:2a1d663b587daa6ff0da90f75dfa9339207ca48c994574aed0ec9f9bdeeef674 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/blackbox-exporter@sha256:b090dcf56933ef01ff50e3366cfebc035181aa1b1c44c0358d9465c4dc1dd5df |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/blackbox-exporter@sha256:a2bd3765c52e2ecb9945e614adf6b346841b5e5d20690ff47a0170ea8fd762ea |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/blackbox-exporter@sha256:8654046a9dbef996e966c62c3b257c8db1f5ce085e409257e9106a2f9d60b4aa |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/blackbox-exporter@sha256:f4a051114cd514f2cc84bcfdbaa8334ce2bc306667e4f421fb4e9c2d3e8e1a1c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/blackbox-exporter@sha256:d43590d7d1993b239ee07fd3652819025f18ddab71e03ec141b24124126146a3 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/blackbox-exporter@sha256:15d7b3a4fa0f6c6a77e38ceb90f66cb5807705462f2e47645fb2521330197ed6 |