Sign inSign up
k8ssandra-client

dhi.io/k8ssandra-client

k8ssandra-client 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.4-debian-fips, 0.9.4-debian13-fips, 0.9.4-fips

Index digest:

sha256:9e9881f94fc82667a4c94cc5b6ddccd2f6dc419b67cc8574aa474a38dbb9d103

Manifest digest:

sha256:1dd0b22d9b7ff9a6abfee9b311f6dcc6e97823783bc60d5df88efb132fb6712b

Size

61.27 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
1
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-client:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-client:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-client@sha256:627a8e28e16bbf98fb93399241407ce2cf40d48b3bbf9e0403b9b6fda1b7179a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-client@sha256:6b5964b88c120113ea2744d35f41cbaae4760caae882d16e55db4e0ec87c5d96
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-client@sha256:2cdbe1d73bcb0c1c38211ef83306307cd81b36a13e58e7a4930c7e359a8bef1a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-client@sha256:a9c9403a3456bbd86e0a90593e5c47e2b0f953f8d92d5d64e790225a03dbac47
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-client@sha256:d63fb3ae092f91ade98ed8d5442fd84982d4b0a709dbf5f067f1da586a2dced8
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-client@sha256:e42aac52a7baf3fa80ee1df9d3287369cbaa081f07e783e742a08a4d0fc0a3d1
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-client@sha256:3f19e44eebe1509fdb4b4c3b5a142f0b43ca81cf7ac7abef71ded6fa343b49ac
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-client@sha256:7f842dbbb044ea589292f8a4395a1661196dae11717d53c3919f4cbeae4fc297
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-client@sha256:16d32224aca37dbfa1337c5d9d175e15237b93d4006bf4e9f4b0702a45b7af80
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-client@sha256:cbf39fe6655620a850b6a7d0abf4ad793f4d193a426c240dd8196cf45fe38fda
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-client@sha256:cc97fe9d21b1d800724c132e7bdf5cf8ed4f4d12f923b190f21f2fe177e3dae9
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-client@sha256:fc31a2e0e72227e410fe02d26ad448118361ef1f1d5823ae063799340a442bf8
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-client@sha256:800be27b6caa94f7ce3a2c9c30e88da7805f3d0836000802a2ba9190415ae15e
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-client@sha256:330b0dd06e8ac43652ecf3bea44a52045521cf6352486841b5ea97db7c7fb5e1
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-client@sha256:4aa103647fd7bda3c6393cb5d72b0cdb070e6fbe391783255b242e9ecd82b95d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-client@sha256:e7ee4fd281c10beeab088aa7064ad4406adb10d8fc33e5d712f4665ae2925d07
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-client@sha256:35277035cafaf227f19078ac73f3bc2aa4e46b0408a164307d045e7baa426a35