Sign inSign up
Etcd

dhi.io/etcd

etcd 3.6.x (dev)

CIS
linux/amd64
alpine 3.24
Tags:

3.6-alpine-dev, 3.6-alpine3.24-dev, 3.6.16-alpine-dev, 3.6.16-alpine3.24-dev

Index digest:

sha256:824800c7a71f2c43011e46babd12e0f34c9f7152450be1906158bc531a7cfa77

Manifest digest:

sha256:85700aa52860692cfcb658d4fddd093da7f3b12d9941a15ab944f05fa6a721ab

Size

44.85 MB

Last pushed

7 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/etcd:3.6-alpine-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/etcd:3.6-alpine-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/etcd@sha256:27b3dcb8a1e2ea51e3c7825ad5779a3c879b15b72cbd01bf0e555d3bdff380a7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/etcd@sha256:05208986fd4f2c432631cc32be94941dc72dbf214e736f1951e5b9d45ff824dc
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/etcd@sha256:7caa67f08784be83b0ef7405ed5f107c187ddfddd5e949a6f19baf4cf7b3e972
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/etcd@sha256:cbb4f372a9cc21a1b2ceab91d9789b9a20f3e0cb619dc2a819bccd9535728e95
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/etcd@sha256:3c5a365f1ef4c465af27aedc7b98d76a1f0926680642379e8a0bd112316b38cc
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/etcd@sha256:5e5bbf613cfb03d8c21b1c94e20d61fa42292a0fa073b5a53e85d38cf9436195
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/etcd@sha256:9a3f109b7156a5c95c9e328a5c647a8cf7836e5cacf2a0d60ce75d6117e2310a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/etcd@sha256:e3452f6e6eeaef24f3d87817735b6e165be8616dc59f4f26be642f2d3aaff397
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/etcd@sha256:e59f92759a5cf3d69ef5938096b6e74163caac0cd004b9b5a99ffee7fdc50195
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/etcd@sha256:bd4a42cd80473e69b26f13cd55f62372aac16df3fab9b31e2b38a0c45a9e0bf5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/etcd@sha256:dbf2d7b5812acc8b50976e88abad48dfae4c402b0e5a5d2876a03fa1b5aa51cf
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/etcd@sha256:0a45987bd728650bd88f95cc7ef8dd4afe3fa1e0fd45f9dc0c8efd96ec65a6bb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/etcd@sha256:fcedb077fda7ace7c6ce7eab1dabab62386a8cbe13fbcdc66d0b2f2f1794b92a
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/etcd@sha256:3887502aa5e24810c9b7a1a61f1b6bfa7bef22c11e043fc6790d83397676e791
SPDX SBOMhttps://spdx.dev/Documentdhi.io/etcd@sha256:e4d9d30eb245c72f04ca55aba7104279e881aa5c0f7ec36db49031f4820c0e22