dhi.io/forklift-virt-v2v
2-debian-fips, 2-debian13-fips, 2-fips, 2.12-debian-fips, 2.12-debian13-fips, 2.12-fips, 2.12.10-debian-fips, 2.12.10-debian13-fips, 2.12.10-fips
sha256:a4cd152fadd000238a9fe262ae118b9719329eede28b8ff455e2e4a5db57b3ea
Manifest digest:sha256:e6da20f4f88302a5a903d3069039da910fcee91cdbe3ca5e4f033be527d85da8
Size
315.67 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-virt-v2v:2-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-virt-v2v:2-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-virt-v2v@sha256:0ba10fce3627f15814cf4c411b1f7b852b0abe8fddbb06ec050194f07852588d |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-virt-v2v@sha256:57fbaba36f96bfd5dcee3a0f56fd67e98b149cb16768367f89fb3ac88ab50796 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-virt-v2v@sha256:30cef558f3ec081fe7b16b256b447214282fd0add698b04f7ab4e1db51b6da06 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-virt-v2v@sha256:1c1273fc4bf567d569183b4584f6051fc6a6c8699e51980593a570eecd55fe9e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-virt-v2v@sha256:7db7f20526d7c84476c864a4f05d5940353d8cff7748f897df201b485ce506eb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-virt-v2v@sha256:fc933ecc1485f36550b86050c792e6f92d2c7e84df0b5adc40b27c35cce2db9d |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-virt-v2v@sha256:7967d59f1f2d48910a8e24d689ab094df8f2439bdb342fce76b94c1c16f10690 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-virt-v2v@sha256:f88620f82730e945256696b65d10dbe0f277d21bd52ec6a8db5f03ef190a2e2a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-virt-v2v@sha256:d47934ec5234d5688ecdc6b41d8e5af4a36e829b11f5e172ba58cbaec7253bd2 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-virt-v2v@sha256:0b1424fc5191e78d089795547ff379feaad1de60afcfb22e6160ca7718a65677 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-virt-v2v@sha256:e2623542188aec1f28cf48053caab89b9aee49a86e36d0a50b5d21cc5fc185b0 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-virt-v2v@sha256:a066806a16632e4391e2263b1be4b55584c8d0c180dbe6e5b17952c431750088 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-virt-v2v@sha256:1c2e0031ce6c90462f829a9310b75d819ed5f70d4863cd7968c9b090dcdb4827 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-virt-v2v@sha256:7fa316f076b977e269b84bd96a892e43c2775c1e1a03fde0e2623559524bdfc1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-virt-v2v@sha256:a8438c9d89109d555c101d3b526b8ca0bff507602fd359433deb23c327d8c248 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-virt-v2v@sha256:d9aa7bc38195f5476ec4e857a8584416b658bd194ab36706eb22f55e7b85730f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-virt-v2v@sha256:e921f47f59adbf82007c78459d0a0b0d328f0ef8cd0f7694594969d0cd59e7ce |