Sign inSign up
K8ssandra Operator

dhi.io/k8ssandra-operator

k8ssandra-operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1.30-debian-fips, 1.30-debian13-fips, 1.30-fips, 1.30.2-debian-fips, 1.30.2-debian13-fips, 1.30.2-fips

Index digest:

sha256:2ada95fabde557de2f79df5884d5a6496b575c575eb46d8f7095c109d749b555

Manifest digest:

sha256:1f9bbb6ab418fe79dc76623ec8c49ab15f225aacb2f8ae6b707f3aa5f614ff6d

Size

21.99 MB

Last pushed

19 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/k8ssandra-operator:1.30-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/k8ssandra-operator:1.30-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/k8ssandra-operator@sha256:a51805ce6ae51bbfbf284467c2b326aadd806d81b8f439b95a0502f65e36cfec
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/k8ssandra-operator@sha256:03070a6cdf4c164d1bdc08045854dffdd58d6766be368b04a3d40a920d55dc06
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/k8ssandra-operator@sha256:f92f11c36e643d4a4c83317c45647f1cf29966e75693c64651e4d6b1a13c4bc1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/k8ssandra-operator@sha256:4bda2358f083639946bda68e9b62cf86da89fae0121a639362d7e1e44bd087a5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/k8ssandra-operator@sha256:0ae660b460d7f2a5ed4f4f2f7db3e457776cd1deeba6640d360c0dc0444a6a8e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/k8ssandra-operator@sha256:8c91779c9c77b30faa53570fe30b6f6327a8f91862ba13eb1bebbf2bf4835e4a
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/k8ssandra-operator@sha256:1a6d630c144feab2eb1c2968329682dff7c5b839db2524c0ac4fb3134c968ade
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/k8ssandra-operator@sha256:23a74fe75828ed8f97a7124f16f496cced2223595a63ce61c6a4b0eb162b8220
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/k8ssandra-operator@sha256:4023e9804fea36ce5e0d206f1df0f7e9db1c5ed16332c19054bcc125d2f0cd9d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/k8ssandra-operator@sha256:28529d1004c385e38f2beb495dc593d0a0b4a919b8f9fb751d1dc5b889e941f5
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/k8ssandra-operator@sha256:15fe82d5127f9e614ff399dcaa116400d449770f3ac7eeed6b6545570405970f
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/k8ssandra-operator@sha256:d33c1c75ed40c4415edb6603c439763a31a32d20b8d80ef2b2b9228a3ff16ddf
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/k8ssandra-operator@sha256:b8b6bab44e65944b34db5be49ab71370347a41f742a264afb55a808b28796d41
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/k8ssandra-operator@sha256:29895722c1569089c829e0e8af3bb539cd0f6bd2c29bbf71b8047a945cc5fddb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/k8ssandra-operator@sha256:1571399252d4b80eec819b907a4289ea8a5907979451b50154c0f0e1e8a9e55d
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/k8ssandra-operator@sha256:af06ee4984a2885046cddf94100f06a2ca8a35d2bd9e005f1985e3181029fa7a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/k8ssandra-operator@sha256:9b70edf3dece3fc14659f01d26d247dbf9a9753291067f9dd09950034d175b37