dhi.io/csi-provisioner
6.3-debian-fips-dev, 6.3-debian13-fips-dev, 6.3-fips-dev, 6.3.0-debian-fips-dev, 6.3.0-debian13-fips-dev, 6.3.0-fips-dev
sha256:87076ab442e2171bc1d501afc055524e98b9ea0f6e09b10cd441ab76f99e2e56
Manifest digest:sha256:cb1c595b7fbccce5ce9e7cb391b4a851b4fdeb3b7cba89a8d94b44454b1a54ef
Size
58.76 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/csi-provisioner:6.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/csi-provisioner:6.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/csi-provisioner@sha256:2721a95d91c755da72576b793b2c1b2443d69921dd1bf10f23c64140c749961b |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/csi-provisioner@sha256:0268a74860d894f87725a18bba21b04cfff6a6222d71ae9f7f9c7bfef9ef7660 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/csi-provisioner@sha256:31aaa1b3eee1b8c02b51ffe151654e552c756c1d6b555f225a3585a643f7394e |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/csi-provisioner@sha256:f957381c39407ef8446d7ba7b7468ead08543bab93e5f18e70e60e563d03e115 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/csi-provisioner@sha256:a5a3aea1d97875027c8240ceca780c8c74011be1d504fa7f5a7f26a43ef631ea |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/csi-provisioner@sha256:5541f61c996866db100c4d6ad2f6cc3056a7efde708ba273067c7a04924e127d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/csi-provisioner@sha256:dcd871b7e27e9c4da5d4d465554691b4fe7e422c8128570d38987ade1eed51b9 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/csi-provisioner@sha256:16dd99a030007c88127b74db09640d4ab64c5bd52a36af8c45628d2f78f7c761 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/csi-provisioner@sha256:378e573005d2d48ec274517047e3a1dd808ea0045c8f32f49a477e9c516edbbd |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/csi-provisioner@sha256:5ddd0604180fcd7b138effbb30d45dfc05f12906df287921e7ab40a13dd14684 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/csi-provisioner@sha256:3472e1d509c4b34fb7f413828803a8f1ed7b32d19ce440d1f53a51cf639e4613 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/csi-provisioner@sha256:e509bb4fa1758051400544bfab177818e5f6955b6d2adcd6c5ae5eb8f55bd652 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/csi-provisioner@sha256:ef242c9ffc6d8701f04b8b9a71da2d7af603f9a2e94942d6585be63e11ed2264 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/csi-provisioner@sha256:b380f92f67d474fe3d57e7f5cf0f6e2bef8065299e7bf253f7ffc10bb9cd7cd5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/csi-provisioner@sha256:a73f8dd736db6ba98c143de312eb1bd2c8d852bb5ca9d26c9382982824909cb1 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/csi-provisioner@sha256:c91c141d93b99823557384bc0a4cbacf0ddf0346c55b82d5153bf5e49d99bc56 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/csi-provisioner@sha256:b67fe702d53903e5a63cd5dc04bc29e045d8613eafd98d3259072aaa02b8b714 |