Sign inSign up
Kapacitor

dhi.io/kapacitor

Kapacitor 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.8-debian-fips-dev, 1.8-debian13-fips-dev, 1.8-fips-dev, 1.8.9-debian-fips-dev, 1.8.9-debian13-fips-dev, 1.8.9-fips-dev

Index digest:

sha256:65687a148a564fed761954568452739a4fcaaf71f0267a56cf47678a47305b6a

Manifest digest:

sha256:1400c820aec471e19b659af87f3f78ac460d7aa127f13e69556606f0eb814272

Size

115.09 MB

Last pushed

11 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kapacitor:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kapacitor:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kapacitor@sha256:dfd4d2534d0e7ce693f100c35abe37ebf7ed0bf284897f8f15ece7064ce6f8c8
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kapacitor@sha256:639aa3d87c9941aed93a901d1543eaab64a10375421e24cf6db67d6383c1acf3
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kapacitor@sha256:2a1cb7cd82cefc5befb421f2b47c7d480d70dd982a4dedc921561a020ec19e1d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kapacitor@sha256:e5c759bc6f043d7f6b2f5a9bbae0832633e947e97e623b1360ce25fa234ab8e8
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kapacitor@sha256:cd371cc2b49247b9fa59cb7103df20b5a630a17747dfce48f378e8a4b16d6cba
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kapacitor@sha256:f45bf1c65ef958e168d464c5eb227eba4606b7ad908591983fabe2174a0946de
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kapacitor@sha256:2dcea1b98ee7d51c0f56a3cb6a93743502e3e45a64e7a98a780475cf208e1e81
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kapacitor@sha256:8c0083aa393c661cb2ae7f70e54b62026b9e1e14a58ffd04df3172c196ba31ec
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kapacitor@sha256:898369c0bc790c2a3b200827467a59a568a7187662d264f08011780517892d4d
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kapacitor@sha256:4fb1e9342a3cda98c563c30f325eaea2187486eef0b510902ebcc85d32d995b8
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kapacitor@sha256:0feb1313d2c47ddabcbe39c81db33a6b2f81205e3b45a4e8b94444f454b26e08
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kapacitor@sha256:a52192ce825cba665e3252d9dc8810bc31a4a0c28133506d19580a7a6bb02008
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kapacitor@sha256:48197d4925c3d1840d832209fd7d2d550a0b6f75cf21c987952aa238aaf9bdb5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kapacitor@sha256:7dc12ec7539fb4a7b973a894769f20c25c9fd7ee1e1952da9e1d919c61fded2b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kapacitor@sha256:569f63c0e60e26c53e7e163520b8cc72ff7923936345cb4bbfa5917bfadb5c19
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kapacitor@sha256:9a069fbcf919a9af212ee25361bd1e9d3bc552c02cedc03407c96fd59ad1bb7a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kapacitor@sha256:e475bdf94e95d309be2a3ff1a930cce3efefbb85e68a683869540b792f1583b9