Sign inSign up
HAProxy

dhi.io/haproxy

HAProxy 3.0.x (dev)

CIS
linux/amd64
debian 13
Tags:

3.0-debian-dev, 3.0-debian13-dev, 3.0-dev, 3.0.30-debian-dev, 3.0.30-debian13-dev, 3.0.30-dev

Index digest:

sha256:3b24bf36bbb9cb3c98c7d136708981d9163303ba5e332e8c578713feb6a31b9e

Manifest digest:

sha256:44988404a8dce31fc5cce3e4c78cf10bc0fd2b41e7f461deaca70093b0642df7

Size

31.65 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
0

Support

Active until Apr 2029

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/haproxy:3.0-debian-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/haproxy:3.0-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/haproxy@sha256:e85d5daf5995c6e9607d44cd976bc517151f505bf4ad63c4d70373b5e73fa2ba
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/haproxy@sha256:8a53e711fd740ef4da9dba02efb55141c03ec50742689541b08b9c3a3bf0e932
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/haproxy@sha256:0bfb13a4dd9cea7f593b5d658f088e942847b56f8e57003ea100cefc83240f22
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/haproxy@sha256:cdcb2bd8c2c85c1a6c7d55a486a6349943fe5ad8c2f360eee617d5b590d5d083
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/haproxy@sha256:3f9d11c905a93da10ae9396eadc9edc5a5509a3dd28a70be92d8c0ff5f9d73da
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/haproxy@sha256:2cff89cedcb8969d733ac001e36705800ca58d76b81636e3de72783434a1e91b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/haproxy@sha256:5fa303b92d88032d3321ce7fc393c3a5a27c0fca4e585d86ec9ba06b7fd89dd0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/haproxy@sha256:3f64018b67af9d011198a91ba7425b4327f6856341541e70e8e7c4a64f87542d
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/haproxy@sha256:2d07569e29ffde2f91529d1acf6ed4b298df3bf12e921cc4da1e08d7a46fcefc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/haproxy@sha256:0c176780ac8e8eba2b0b109172bf1e2ef5d4a92553976a1e28827c6933babd2d
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/haproxy@sha256:12af41f972db2f3d1f382eb22d7a340422beb1045555cad7a8fe9b8a83b80570
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/haproxy@sha256:7a7a54f2982f122ef12c85709944411df70aa0e224a9589b58b1d289899278d3
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/haproxy@sha256:45ecd1c1d15073f65e0259116b1620216975206bd141b08d3c1a2e6234b263ec
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/haproxy@sha256:f08e5de8ff634bdec0a353c3a91b0f3c3767b97db47338e8d1372c3e8be5292e
SPDX SBOMhttps://spdx.dev/Documentdhi.io/haproxy@sha256:0b36234b570f393713822007434888c293aaef8a181fdeaa9911a9f276121c9c