dhi.io/gitlab-runner-helper
GitLab Runner Helper 18.x (fips)
18-debian-fips, 18-debian13-fips, 18-fips, 18.11-debian-fips, 18.11-debian13-fips, 18.11-fips, 18.11.4-debian-fips, 18.11.4-debian13-fips, 18.11.4-fips
sha256:87c375a9b8720db09647b8eb72de94e3f27acb0630acdf3cb723449d9a51052e
Manifest digest:sha256:c7481312fa2791ca6761f257f4309498e6db3571c34bbd9745ceb0eaf7d7dffb
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/gitlab-runner-helper:18-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/gitlab-runner-helper:18-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/gitlab-runner-helper@sha256:d08058932efdaf343c2f17357d5dfe1261a4af9da8bd2bec90d34bc7580d1529 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/gitlab-runner-helper@sha256:29bfe5ee4af0a59e82f6be759400969eab59af583a54ee9423fbfd56d74826db |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/gitlab-runner-helper@sha256:18f7e35af0cadb58f2cc1b1947820d599caf72d8bba33ffae5a0e7faf07fb2c2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/gitlab-runner-helper@sha256:dd32c5878c5f92e01cc2718e899c1d3333870e09f38811d4c5b731978ed0ad93 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/gitlab-runner-helper@sha256:495c8ccc6f378578b5950885553df5d88e87feb8108b3e20073f192224f8eb30 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/gitlab-runner-helper@sha256:029084c74a856b8de756eeda5cc8fc7da841151d9ee58534e6aa49285e98fa8b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/gitlab-runner-helper@sha256:9fb567c9670f19c717fba3c078a02b2ae4fa500092529338a867cbd3a6d96eeb |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/gitlab-runner-helper@sha256:e13a8f519b41b748a45df4ed641e8c00c2bac7182aa095b026e14adaa0bdcd26 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/gitlab-runner-helper@sha256:1e50eff60c267b3392b485ab5076d09a6a3e990a7613df5c37a338d677e90a05 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/gitlab-runner-helper@sha256:71a2d47932489b7036aac7c5082e99e605cf38ec96f729916ff672a0e6bd2ad1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/gitlab-runner-helper@sha256:b725f07206b4c104b616d28b078768cf6b36ca61996328273cfa3bf8664ab852 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/gitlab-runner-helper@sha256:1d2e92451acb9a890fc5fa6fd6bb65c8ecb3b3d7c9b4c42c8801cce035c68c01 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/gitlab-runner-helper@sha256:234c91187bbcb2fec96f8d63f8706c2bd1366010c53fce8349ee8fba7e103631 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/gitlab-runner-helper@sha256:6b5c4add285975c8356e4088fd9938b29e756fada51fc957025ec8c0470b7a4b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/gitlab-runner-helper@sha256:8e3f7fdda1e6b399503bea6685a56369ec20d234aadeec463337f30c3acefd03 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/gitlab-runner-helper@sha256:1270eeeb25205adaa247db9b0b84ebd8c0819ea849b23714db929627e133caab |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/gitlab-runner-helper@sha256:dd110c0ec5e44930a63d7e004d854df170bf1f5f7fa294340ee5926515af7834 |