Sign inSign up
Calico Whisker

dhi.io/calico-whisker

Calico Whisker 3.33.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips, 3-debian13-fips, 3-fips, 3.33-debian-fips, 3.33-debian13-fips, 3.33-fips, 3.33.1-debian-fips, 3.33.1-debian13-fips, 3.33.1-fips, v3.33.1-fips

Index digest:

sha256:879f28172d6ddf3f8e6ff97d2b69a53905da49402f539d5d0e6c0864d3078899

Manifest digest:

sha256:d95ae89dbb0a1581977e0fa5819d2330475e501c99260a168ba179b94dd47a22

Size

13.29 MB

Last pushed

17 hours ago

Vulnerabilities

0
1
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/calico-whisker:3-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/calico-whisker:3-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/calico-whisker@sha256:bee71ee587df857fa855520143be4ff44220bc1cc89b2fbfa76c1fbe5962e714
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/calico-whisker@sha256:d4d986c239f8291302d89681f37fc97f5b32f4376336e245d9f8df012ce1c005
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/calico-whisker@sha256:ea32405c3b4ed6bf0c33f973272e211be512eb1bce094de841468e071594b73c
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/calico-whisker@sha256:20a5cdad4f5e1332a03cd826afdd7a2a56f42de8990df417847588e5641a853c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/calico-whisker@sha256:f81115675a43192c721bcd08fa0cbc5e3bb6a6c1daf919933617037eea768edd
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/calico-whisker@sha256:b7ac488fa91ab744272a954cdfbd331f38e9768ca01e446fa8e09eb0ba3b8e9b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/calico-whisker@sha256:470950116eb828efe5388481bf57236e568253efaa6958ae70647591ec80f37e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/calico-whisker@sha256:ebb414b568f9064551e2b84c264416645a438dc399b8fa3d442f080eb842cd02
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/calico-whisker@sha256:d7940c907c711b4d2f89b019b37f0f11eca9c299fa7a53499fd6acfbf2cfa9ec
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/calico-whisker@sha256:010f8540d06ffbf5cda2d03cb7b32293f3c11272b5c4de8762b19004bfb406af
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/calico-whisker@sha256:d36d9ef6d0c1579b72137643b8c7377965ba8a8ce47935c6d1b42332a28b79e5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/calico-whisker@sha256:a042bb762cd585e0923db0274b4df5edcbd9e4c0cf1b8b36b9bab9dfe7ff101a
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/calico-whisker@sha256:6371381085895e342a0482787a9a3f40471309a442e2734695d3362d622f9892
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/calico-whisker@sha256:5eb983fff5d65b9df8b332c07d3befade97e28f054f30c8889bbf93ce130abd0
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/calico-whisker@sha256:ceb2ce64594e086945f5f8b1735e1a4e1c46658be1eb2f3f4fd2e9c8699514d5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/calico-whisker@sha256:7ccc8c414422885613fcc5c0646ce2e95b4cc02ceca69a6cb48d850e42a23f61
SPDX SBOMhttps://spdx.dev/Documentdhi.io/calico-whisker@sha256:343b7d45228249e1c74d6440405c42ea5945faaf0e0561c8427115eca898a40c