Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 3.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev

Index digest:

sha256:35000c02f025b734d96d186f140dcc065474aa02ad09065cda9690b1ecead897

Manifest digest:

sha256:772f189f2c07e7ed7f2f7425b7461e3ac3abb9efd78a5b2e9c1b065ef842d378

Size

117.61 MB

Last pushed

32 minutes ago

Vulnerabilities

0
0
0
1
8

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:87e9d840ebb17f1f9302d23ae23d5e98da4e3fd67a7e4faeab294ffa154ddf15
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:18eb7764ccf960e4ea71e46be6c31d02dc704e5fcc94d979919f7f3993f48a0f
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:b420fb968a330138d95798d0517cdfe76a8f02664fececf7090f50ba9a58a1df
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:582991007fde0b66f1f3c8f6fcfae371c927b96e56835ff55434f33614d081f5
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:b6e962ed27220507b73e3e91861f57f469221a7b76219347c3ddf78b7674e52b
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:705ffb1bed4327bee0de45e8ebb205030d5082a1dbbe6bee10820ad6dbad6ff8
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:7d422192b666b1cd73b4c110fa215d575dff4e944d57e79e2064108821438e04
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:376e24edf0a6abab4d82558a6429a4a5680a585df416a88fd5ecd3a5f093aeb0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:4074db03152409153129032cfa884d2fcc330aaacdd6755e3412f5e8709d6ffc
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:b6d758291c44df16556fe93aec0bc69f1608b4ee0c6f1da8ffc6caeefbd770c0
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:35adb67c425b69a5789ddb86855a79992094c8963fa2ee5eb578df36bce8bf82
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:680b5f9a2414a225667b4440bede40a3f6fbe5436903f2f48e944530d6a08da9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:045729546ea8b69158cbac83ae8baf2b48c83c94ddeef497c8a0721ad2f487b5
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:88a19d194fee8966c0a79150d41973855bf936dc9124c7729dafb033e7825b7a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:a3ec4d22ef40311d0cfbb27f3fa1fe3a680143611a1e520a5f61130468588876
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:330a1648c90c4328e919aec25b6f5c845f83e517019e8f3841f65c36cbdab556
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:a65a2a8648de636a0358f3b147efb200c7c49aa4a64dd505d3dd111e63183eec