dhi.io/jaeger-es-rollover
2-alpine-fips, 2-alpine3.24-fips, 2.23-alpine-fips, 2.23-alpine3.24-fips, 2.23.0-alpine-fips, 2.23.0-alpine3.24-fips
sha256:811312c46930bdee721649f322b17e135f87e6eb3fad2d1b9a20e042e8eabc52
Manifest digest:sha256:37fe7a34ea6ade37d192db744ab10f19fc095b7142f9be71cac2d33bfe5d732e
Size
10.69 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/jaeger-es-rollover:2-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/jaeger-es-rollover:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/jaeger-es-rollover@sha256:7f2ba5c33934ff42337e48b80d8866cdefbe4d39f745c020b6c41aecb6b5b3da |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/jaeger-es-rollover@sha256:3dfef0bf0e6e9da6817d51c5a950d6160a905668ae3fc55f7fb2ff5059965904 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/jaeger-es-rollover@sha256:0d4064706e86c0985005a58c192b7185e7207e96f497b97f15bd3b01239002da |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/jaeger-es-rollover@sha256:33e35ba539425191c9ab202723e4dcaaf6a9632798b256a9829aefab71a9c081 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/jaeger-es-rollover@sha256:5c7b8572c827278a23180b18bf62aa138f2202a1017c244214f52be493af6fdf |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/jaeger-es-rollover@sha256:e638dc0a681d1067a4d97a27543480312250ae5b6ac32b4794edfa805862bd78 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/jaeger-es-rollover@sha256:082f265a62954f197903f0f678c51994051ec808748bdef75ad06c9937f258b5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/jaeger-es-rollover@sha256:00e4d81f460fd21170aaa4ecf60b941a605587d47a469c842419be6a5648642c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/jaeger-es-rollover@sha256:9a86084e75c285b25c3ead73bde17205c3366ffb687140d38b5fd779f6684b25 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/jaeger-es-rollover@sha256:9a6faf56295f78d16ce87f37a32d230d2fdb85a3b88192a83caff3a44b32f2cf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/jaeger-es-rollover@sha256:2e86f53bc2423a3bf638b8e1ae8d81016f149d85f6e0741fee142abf5fc62eb2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/jaeger-es-rollover@sha256:df3e1d0f34b247af19c6a823b8f688b66feddd2ed232cba86cd2c812ff0e4f02 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/jaeger-es-rollover@sha256:de10878a113be20f465542bb9ea7b36a2c464aa49f675ccbf54103ac5c325382 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/jaeger-es-rollover@sha256:2325b6e0708f21c7966ba9aba1683a5b86389b5ad026df5d74241f98de46dfa5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/jaeger-es-rollover@sha256:4f6fbd24fd50162b0562406f2c83f31ad3fc2f1b01e47151538e9702f294a5c0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/jaeger-es-rollover@sha256:6bb28e48904a2cd2e858d9ec56d41e75cf6f60e2f5e5d8a85461ac42f50f53e1 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/jaeger-es-rollover@sha256:13a4222de3c96c206745f0b9235eb8910f1680ceb929f1e168cfed651ce5eb09 |