dhi.io/cdi-uploadproxy
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.66-debian-fips-dev, 1.66-debian13-fips-dev, 1.66-fips-dev, 1.66.1-debian-fips-dev, 1.66.1-debian13-fips-dev, 1.66.1-fips-dev
sha256:52a45828d81566e33f7a7c24269214fdf5312a89db9ca03484edae1324e98ea1
Manifest digest:sha256:eea2b1b195e3ac1b04acb664b8714f65c0a1ccad66a578ccc1079eb9a681e426
Size
48.81 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/cdi-uploadproxy:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/cdi-uploadproxy:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/cdi-uploadproxy@sha256:e3eeb2ec13ad4522d75fd44ec8d710fcd6774d146e84add54d7b2d816df5cf47 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/cdi-uploadproxy@sha256:1114e825e523e1395d8283884acbb194cf78049cec426880c36c1215586b82f1 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/cdi-uploadproxy@sha256:8a2b01e34433f1c414967d9a0acfb470786b4d99f68714dc169530d2d9ae77e6 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/cdi-uploadproxy@sha256:d8504f7974171e97a29b96352985cfc77102fcdf17090d51c529654ca4216be1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/cdi-uploadproxy@sha256:e5881610b618604656b7ac0b7f5d49dde12ba3ad6ebe4296c0453db648ea4177 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/cdi-uploadproxy@sha256:964894665eee20816cce930fa785509f378c999b3ea173cf2f4732443441bb25 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/cdi-uploadproxy@sha256:28a3d01230910c0ad659c337f749d3f79bbcb8d46272e2b1e92a145916a16547 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/cdi-uploadproxy@sha256:f0c06535abdfc50b3512cfb650cddb902fc8b8e93e5aab51de1e25b750175cea |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/cdi-uploadproxy@sha256:85ee3ae19caf23c57fcaf45e0000396b30e4743b208d0244df7dee3caa2f6f07 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/cdi-uploadproxy@sha256:959feded32247d11af3deff79e3760d6bb14ef744d0e3d1c88245986bb265404 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/cdi-uploadproxy@sha256:8700a47c4aa5cd2ac41c9ac1f94a65f232889bc13117a1c7517bda5589a0db68 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/cdi-uploadproxy@sha256:e466d35b1707593056e339fbed6261b2a62eb5ea00eb1ff05be5007393341796 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/cdi-uploadproxy@sha256:ca91b6f6d4315a94456963de95a8353df8ed70ef185a3e9d0f29838763cb60a1 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/cdi-uploadproxy@sha256:cc8ac957f371fa3ca00362a9064d381fc9da6a6b5e377b0c158bcafb70ac24a0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/cdi-uploadproxy@sha256:14e1321bd4601470ae71629bf29e89362f7064a8e6dc9e032e74718b592563ce |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/cdi-uploadproxy@sha256:b4f878f42d000b260e4e9bbf8d269324f70ecfa5af2d84d385eca3885e46e456 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/cdi-uploadproxy@sha256:2443339870c556d89da6cd37c04eb7c360bdd4ce0b85d4d62ec6f8509e6e9c78 |