dhi.io/gdrdrv
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.6-debian-fips-dev, 2.6-debian13-fips-dev, 2.6-fips-dev
sha256:c17195ce1fcc092698043157cf6e6f45f64147408840c02bd83f63ef70358646
Manifest digest:sha256:b4e86c1d616f062b737feff2cb09c65846112d8747e338831460d0acd9c76ec3
Size
114.16 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/gdrdrv:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gdrdrv:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gdrdrv@sha256:10aefff3afd390db0fd807b189fe4c0830434ff3ca69765669edeb8257da1454 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gdrdrv@sha256:6223cba3bbe7db815c354276c4c00bce5fb9f51058740e84f900272d7a604aed |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gdrdrv@sha256:ec8ead7222a0738f3a207384a4163541027095dff4e553221f21e7fd0d76b85a |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gdrdrv@sha256:215c4d8399e7089cf21ba99902e6c0da446f0db28419342dfd9f4029b0df1410 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gdrdrv@sha256:dbc34dca9dafdde3fee9b70864d1b24cafb0399f525bbca800a59de149bb0a3f |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gdrdrv@sha256:b894b3b92a849e5b89ff6d040c0bf0da8639f99f9ab198860338e31d0620531f |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gdrdrv@sha256:997292b02e016bd7aa00d2560b238895f56893cec6b62d6b7d2d54ad6c83be9b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gdrdrv@sha256:c1addd5c1554bd8db089cc201ebf7235169ffb4ea60cafc2a1041e76a048b31f |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gdrdrv@sha256:e17913a3dba5d0a2bc749cdd67653cb8e0f81b6b63fda32002b759b59eceb1f8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gdrdrv@sha256:8393fff6546c31c78a9f3a14a14ba022c9c53f9238cfdde3ffc8ac9cc2025bd7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gdrdrv@sha256:5e1e13efd4c6f77703ab9360283f396af8fc3ae6403845bf2cbd7260d6fba444 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gdrdrv@sha256:49cedae09312d304967599b47b7073bfd4dad4da1b933fd60b28cc9464d2367c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gdrdrv@sha256:320ca92d0731507ea2caf1ccf49d7eeb6e43e8acd3f5fafe1bb7f295f4c41dd2 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gdrdrv@sha256:eb7e01b24364a991ab221916e45babce7148a85774de83335aeb328deacca286 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gdrdrv@sha256:69d0b4ea33ee0ff84dd5d358f1be10ab21c031593e222f584be5f42fb7d68fce |