Sign inSign up
k8ssandra-client

dhi.io/k8ssandra-client

k8ssandra-client 0.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.4-debian-fips, 0.9.4-debian13-fips, 0.9.4-fips

Index digest:

sha256:4d63aeb9c0d95c067128a7b447f446dbd29d9b542d411893c74af122a7c8010e

Manifest digest:

sha256:4c25d67163b4291e330ff0e5028c6714fe5de5f7d1d31bffb930d38005e35b9d

Size

61.27 MB

Last pushed

18 minutes ago

Vulnerabilities

0
0
1
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-client:0-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-client:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-client@sha256:2e01dcfdd20082cd8e5cac422a76fb36cff160d22c28ec6478c7f7457f18b49d
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-client@sha256:3a759d178a620300b7383caa5faf49eb462aaa9341ea0867332f7b48e91be2d7
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-client@sha256:e7c9be6d5812e98ff3d96a1d47adf43c68e017ec750d486a80044de784f6eb60
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-client@sha256:9a102c8f8fe6807c7863ba8733135f9f8764740b6048a908523f428201c4c4d3
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-client@sha256:e134ff6ff05291cf4b93c4bd1f58b48895adbcc98456d798ab86dddd5dc4d637
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-client@sha256:ac07ed6c535457f06206436710745e6a53b7d942358fd4daa3f1890407905ec6
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-client@sha256:c28f04dd53de0c9e973f8d98a4be1664687d8ce3f596f9544374401a6d3c0244
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-client@sha256:e91fa1781375910596afe3b8d12e8552b235ac48663a68b0dc7bf7533f49a4a9
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-client@sha256:3e6555a6050827c0ea10e7fe04633a651e51090ce6d399e03f56de467333cef9
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-client@sha256:d38c896c1184700ab4a57116ccf71c225cd8573fcb640f90259dd05588597172
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-client@sha256:2055c14795a1c15d317cad0849ff9b2b9e0ec930bb6d87c7b0f3b9496305bbbb
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-client@sha256:054bf06189738ddd07f47b364f5fb4a21625c32bd23185c7017d6a5d98672679
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-client@sha256:babbff0ff0c23d4644c9b43a2757b1bc6824554e813f02f5ea85a6399596f9e3
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-client@sha256:883a5dbf7169f6b2e456f86d4cdb008ab1a4aa0717e5ada2f18e8fe22c4c1183
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-client@sha256:22b84b674de57f609c46e1387eaa8147bf610a23f1cdda902ea8f844efd48ed5
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-client@sha256:a0b28dba50739c2aa0bd4795e703f1c73e169cc07401b62b252ff3c6149e6e05
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-client@sha256:68e46ae3cac32408f478e8fefbd38398b9d46a5b3475225feab3b4f8c1f89aed