Sign inSign up
K8ssandra Operator

dhi.io/k8ssandra-operator

k8ssandra-operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.29-debian-fips, 1.29-debian13-fips, 1.29-fips, 1.29.1-debian-fips, 1.29.1-debian13-fips, 1.29.1-fips

Index digest:

sha256:fc23d869ff611cf084ac543a19e008f0f3207fd9f5fcb8789aad8e894009ba79

Manifest digest:

sha256:c1be76751cc428b8556189f16dab752e9674a0cdaa5791d514b5adcc20bfe3a3

Size

21.99 MB

Last pushed

50 minutes ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-operator:1.29-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-operator:1.29-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-operator@sha256:db13deb00d3af80e85fbd7c53827f473e83ccd1778e40bc8000da4a44278f1f3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-operator@sha256:be7a240e7bdb407d15f0d3a3c3ac465386d7cb57b4a51bc26e1a8bd1832fb776
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-operator@sha256:7c620d7fdf7ab2abf90bec6feb95d9d9f99122effdd77f60dc34c55425654570
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-operator@sha256:a0c182d46e5daf526a129c60ef259ef7d65bd8b425fd216f4eaf9fb177d0c829
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-operator@sha256:40c3dac10caf22ccdea3f3827fbaa5961ffe5676f2f9c695300f0c2272ad50c9
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-operator@sha256:63aa1d3a2d2069e3d6edaa2f8ee6f1027d0e2e19f2c398233c8ef3f539d872a4
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-operator@sha256:89a0f424bdf6ec2d6596933434369453c568e368b9f633933de5315bc022f925
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-operator@sha256:e75e6f3e91365e0600e52998599a22665d0d3544947b9fcb395a30653480d727
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-operator@sha256:c0e50bd3a39b7158d2fdc2836a5b720ae5dbeaa125022043453b1f1f0a1c25f4
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-operator@sha256:f4374098c5b7da989e728ae1bb9913dad2b5d04e698286caeb80b3ce010e58fb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-operator@sha256:c0b8b575792793cbcacef513587c00d9a1bce0449c9952abeea89023caec77fc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-operator@sha256:1605cce39730a85f19168164903caea80df0f58217d94ada67f85daa087fb165
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-operator@sha256:7984c995f34b369dd3ebd015cb5db52d048d841037975b18b9536de5a519c1d8
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-operator@sha256:35d0a89e0468e9e35e74d3d2794fab197d5102f8f3245c33e76143c891aff0da
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-operator@sha256:3f8a049df91702b56be43f59656fa34784cd2322a7b74e8005d067d950f3690e
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-operator@sha256:41cbdf8cd5bcb14a338796e43de24bc3e850bae8113328593cd3f80cc8d714d0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-operator@sha256:e6a335ca49c8a0203b62f45bdcac689bce598d6385d2087bce80a28e3c165a58