dhi.io/forklift-controller
2-debian-dev, 2-debian13-dev, 2-dev, 2.12-debian-dev, 2.12-debian13-dev, 2.12-dev, 2.12.10-debian-dev, 2.12.10-debian13-dev, 2.12.10-dev
sha256:b07cfd52417723778f79515c599154a2e64f9c61667406c2d731e4d4dac64161
Manifest digest:sha256:ffd66b0c3b502eb170bc383af22870bc5323b8dbba88220e4fb1e1be51961815
Size
79.71 MB
Last pushed
8 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:dc8a0c5d8f2ec425ecfa0501f70ccebed9343483b7ffed48f35fe7c89bff8d17 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:0b582690bec099e271888159cbb8f3de0dd93e8423236e8694bcb78416448c2f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:976d381bf81157d86f7eeacdf8ce3facfc8fbf7e231b94fdee181c8a87da93f4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:e545c498121360b2bf5b0d2bd3544627cf094ab6e093179f8eb9ee7e8ce41b86 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:a708f39d1b1d85b58241d0b13543d27394cb64582c5a99793db281aafbde6d56 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:0807ca2bdbc9ed020eca177d5e24bd700f6a21dbc832c0d9dcf79dc8592570a6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:61c8c25e225a709f985cf73eeb73cc982de8ee95e3c1eac2fd3437b3fba83996 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:7d2bef6fa50704304fcfce47ed57adaad5789e67a9517aec22c0c514c3d680d2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:7fcfc4b766920826bfd25dc25ba57b4cc3048cd074c7f55db3563db82bb97267 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:9216048005626faa1f7d9a8a209ff235df288d87c18ef27d1d12342312324d04 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:9242fdf920ffcfa41f83665ad3ebb899f29bead5565f98148bfa99aecfa3ad2b |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:35460c9468a79f8f904ff2f0a302f629eeebe9f3dbab9cd7f4cdaa173d6cf2a5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:e837e262313f248fcdfd4ed1032ed93066c052bb862f682e9adb560a73d9f9eb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:b042dc7f4ad99f29093db8039fcfe4b33d54067239f622b36b770496747d255c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:8a7345cfdeef8f0dc3a5cc8baebbac3015586e02d67217939b9260ef5289dc02 |