Sign inSign up
K8s Device Plugin

dhi.io/k8s-device-plugin

K8s Device Plugin 0.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips-dev, 0-debian13-fips-dev, 0-fips-dev, 0.20-debian-fips-dev, 0.20-debian13-fips-dev, 0.20-fips-dev, 0.20.1-debian-fips-dev, 0.20.1-debian13-fips-dev, 0.20.1-fips-dev

Index digest:

sha256:27babd8251a2ab0de320b3e4b52fe50d76df1203f939c7af1f0d56c233298dd7

Manifest digest:

sha256:3f28d555510e87b473dcc95b054603b1b65ec414d9a03e2fa7a129797c277be3

Size

90.72 MB

Last pushed

30 minutes ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8s-device-plugin:0-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8s-device-plugin:0-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8s-device-plugin@sha256:ccc64d12cd4363881c064320ca2e9009e7e5f86f9e083552cb28354cb8fd2baa
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8s-device-plugin@sha256:af04ee43a68b53e10ebb5428a0f7405b31f492f5fcf2910e0caf44f155772b4f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8s-device-plugin@sha256:9dba3c8b561558f2c3664390b0bd33ea9f2d73151c9e76e7eb2a399fa5fd2bbf
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8s-device-plugin@sha256:5f6787d7d5dfd6a2866e7af6cdb714238ba1655a9f483d7ec51a95ae1f4af445
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8s-device-plugin@sha256:bd87a404f1000cff77cec2e0b4250b943aecdf731bdd428a4b1ca59d709eba27
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8s-device-plugin@sha256:d6cd5bb9a1adea1165ae1b684b547ae2534436c1db491555fdd79b676471247b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8s-device-plugin@sha256:a3218d9b48613fd8eb6ec4b609405509a501c52fa6048f2a9ad28a1193b74a23
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8s-device-plugin@sha256:bfd113276cf77796aed00ee0387a8ab63953fdab51104879c6b3258367017dbb
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8s-device-plugin@sha256:8d5c18a619111d011fe24c885b34094d527f5bcdb9d7ad119bb505cdc4966b78
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8s-device-plugin@sha256:6e269fe39222fd8b03e96d1eed5f9047e473d3bb729154d033f78a44236f5996
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8s-device-plugin@sha256:871e53ac612bc4c4c148b6972950805d4fec3c7b8072f95554839c4e3773d1c6
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8s-device-plugin@sha256:4eba2c74fadb8fb04ed21b350ef1fda87505c902e84d9e6b9dc9ab1582853111
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8s-device-plugin@sha256:52c3936da4d47bfa23758b9f0096806de1c11a433c6a9a4237d7486827374c64
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8s-device-plugin@sha256:2eecc4f69538e0999d987fb676ea3ef47a0265db5f0da198aa1ac9b904eea2fc
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8s-device-plugin@sha256:8e7a18e7ed39cfafa2d1c99005cc5d107be66a9b3841cde2865f937b3790878d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8s-device-plugin@sha256:a08a77f279d0cb55b3e88cab08a6cf0beef6f99ce780947a35921d953325948c
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8s-device-plugin@sha256:0bba56cf0bbab072350b5a6f4bec8c25cd2d32a8ed2b4ed3c8dcad2aa81d53fd