Sign inSign up
Harbor Exporter

dhi.io/harbor-exporter

Harbor Exporter 2.15.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

2.15-debian-fips-dev, 2.15-debian13-fips-dev, 2.15-fips-dev, 2.15.4-debian-fips-dev, 2.15.4-debian13-fips-dev, 2.15.4-fips-dev

Index digest:

sha256:e97d308412798ff21693e4836f2c828eda1324d96fc1044cc85aac5361aea625

Manifest digest:

sha256:397cc63cd2ac7770aa303734a16f7405c47200ac88b24c6ce87d7c6c86628fbd

Size

43.28 MB

Last pushed

15 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/harbor-exporter:2.15-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/harbor-exporter:2.15-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/harbor-exporter@sha256:be897fe0a66e06ddae789b6e7a8ac066fa856666706cfd502c33b4c1175fd781
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/harbor-exporter@sha256:767b467c07035585130ed006b80f06505fbe885b79c3283dc3cd89a88cb84212
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/harbor-exporter@sha256:40d8d22c7ce55e02e50243e6c95c4d0801ac8a3db4ca7dc7ff83d7198bd41725
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/harbor-exporter@sha256:345402c93ff21e0ba8f87f7c378ad86337b0bef6dcc4d71b68f0c2342c441c4d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/harbor-exporter@sha256:e2613f0bacd47ef11c3709a6ebc97aed6340082e455320dbd5fad0e45b2a654a
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/harbor-exporter@sha256:a4ca632dd15e1af0f5e953624fae37d73d8e66b8b6cdf01abc9088121152969e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/harbor-exporter@sha256:b27e2968ffc7c0041467afb80fd4cb9c9c380331aaaacaaf78a973d64db55f73
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/harbor-exporter@sha256:f303f698b440029489b3916370e0b230496788e201a50563f6bda3851ae818e3
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/harbor-exporter@sha256:b67a0aa82b05acbef80e6e2ed86f523ce1592f5695cedab3d14c8b45d15d6ef8
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/harbor-exporter@sha256:91e6c34d8e4c950ea93eea8fbc8bc614f72c2efc8f445d4360dbe31f2caea3aa
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/harbor-exporter@sha256:330a4a3c08bcad26ad3592e0ec5410298669e09e36e5f721d3122d43bd32ad69
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/harbor-exporter@sha256:47e25a50fe6902c5bd9f1e302241317f4e1604024077cda43e1fabfaf1a5918e
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/harbor-exporter@sha256:7b53c151cebf4bf4832e85ba8f37d84e79120aba0fb26ac806bb8c5d59f6731e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/harbor-exporter@sha256:f4b85e21c5d75e1647b3eef7573c2c4d482068bfae63feb885e7f65d1caf1b97
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/harbor-exporter@sha256:d1a943b5e89c694d649a43028da369c163c5f2d8d42d234e8e7e5082aed2cae3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/harbor-exporter@sha256:c5e2ba3d8463b180edf90a80d54b5c0c8542d01a847defa5221623228a168ded
SPDX SBOMhttps://spdx.dev/Documentdhi.io/harbor-exporter@sha256:1654969a9cd842127b77d4adcf87263d7a2d0794755171603370ca2705761394