dhi.io/calico-webhooks
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.32-debian-fips-dev, 3.32-debian13-fips-dev, 3.32-fips-dev, 3.32.4-debian-fips-dev, 3.32.4-debian13-fips-dev, 3.32.4-fips-dev
sha256:6ed0f920759a093c4d085956bc351e12b83b1034f0b65efbe25912fc26f531a2
Manifest digest:sha256:04292a8581c3ecb577082d8c80989fbd3510057f5af6898b2907b89f6444b098
Size
54.57 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/calico-webhooks:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/calico-webhooks:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/calico-webhooks@sha256:849bfb2997e825ddf5f2b8f0564bb6c62245e7e2030310819f0314c8f72bcfd3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/calico-webhooks@sha256:1d5b8c7dd996fa5577f235dce0741aed28c65e50e94dab3fe2123c95c607c22a |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/calico-webhooks@sha256:0b72e59c0c2c76df72428915af37a02aa89ffb9509566ded0dae342874c5ea4d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/calico-webhooks@sha256:dff22da88abbba544b7ba0614a08c2dd2f3c8e478be58862846c9e4a956e7b33 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/calico-webhooks@sha256:6a33f5d3eae74b461b4f474db4c236abc96ffc6105cd7dc6632aedf478d44f35 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/calico-webhooks@sha256:b65b7c91ab190ab778f383a1cb4027cff779223b49f31a72bc4a3eaccd0c1442 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/calico-webhooks@sha256:f6d673b505a2acef5b387cd63a8d5e046d44105e51b0e9d7deecd28abdf39252 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/calico-webhooks@sha256:27f5f6e38163648f38ff25d2e06eb20799c4cfeb457a3537135442f0cc3a58ea |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/calico-webhooks@sha256:9836349ec08b1a7291ffdc403f90230e8a5633efef3712220e2fbdcac79e7f31 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/calico-webhooks@sha256:37c0f2b74f1456442572543135c6a15caff5bb6712f3d8afd222d6db8cd0b15b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/calico-webhooks@sha256:75524c4b3a0466eaee41c0d52f5b7d75a5285169d7a3cfa80a901ca68041339b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/calico-webhooks@sha256:087ed95bd0f2da57922949e5542143455e03004a392ad9a7c8d521baa3f71dc4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/calico-webhooks@sha256:e25553ae6acc175a2e5e1d0d47346e6e2fe0db7cd56a1c4343bbf44f5fcd06d2 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/calico-webhooks@sha256:520ff4ca0f9a5902e3251edff3fbff2dd26a45ba17925d626dc150c846c0f274 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/calico-webhooks@sha256:9757d3c5dad215c5d9fe0cfdc392a83e2bc8a872d65a2781dc0b976013bff8ee |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/calico-webhooks@sha256:566e0b21fbd5f1c5cbe18333ec97a65f0d9331acbb29f3c0751e2cc2a13972e4 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/calico-webhooks@sha256:89db353728bdc3c16f64e20fd0ab6c4df4ce3021d3b7274b48174dfed7a90a15 |