Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.0-debian-fips-dev, 4.0-debian13-fips-dev, 4.0-fips-dev, 4.0.21-debian-fips-dev, 4.0.21-debian13-fips-dev, 4.0.21-fips-dev

Index digest:

sha256:9bd7dae46ee0730fae407b0641580942d23ec9a6d5749d53bfa553cfa3d5aead

Manifest digest:

sha256:facf32eaabac11b5c32842f4a946e4a796db2bd05ac15e6971b4b1fabab8bcf0

Size

77.79 MB

Last pushed

2 hours ago

Vulnerabilities

0
0
0
1
7

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:4-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:ebb7cb01ca90f566bc0e9b9d75a0fdd3f5698a282b800e4e74e601fcf94c4df9
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:5df16ed228a4c90ca743e2b60b3829fd2dd71136e2f8d2cbd082a72221508c17
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:8c50a0b5b5aa5c4f1c730cabfc70d838616911d20cbace85b77c585245698211
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:730547a8713cac0592291cc94c13e76cccbde45c6d75c70ba7210da69fc3958d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:cee628b891bb1afc1d6f88e8f417cbfc0d8091cea1a7caaafb87396b39323da1
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:72056d6832dc055f097bc6384f12947e8cef531a8837598c556888631bd992ba
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:8500ce4ccbdf7156a80f026900026fdbfd24790a2a1c59d30cf05ce7fc4f774a
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:e22cf93aa4508398e1a3b72e60bd43d350cbdbbbf4ee4f8c65fb58c83199a4a0
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:fbdbb85ca51d1f66cf622dccfd9a81789e976bd22f97bde774d27538e5e9b9af
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:69b6603ac6e68b7a0effed0dac819b2d54e5daeb1c06670783a4a66ec20d145c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:282e2577d171fa946ed7c9d26719f805901762c51649d2597a3fde30871dff6d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:99cb04a6bc473ca60026d7946c07bed8cb57c266fd360ce23c2803092c2d0bf5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:d86564bf54d0545d432ab06cc345411ecc6210b1a1237c97054023c7c43b3d47
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:dcc06c68dade79f22067c5454bd48b91a9f104f861ef1442ccd9f9617d7158dd
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:c35587f50e2f91202ab963ce8dfcc5cbf530b7733749b6ef1e7e57a0b7f5d757
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:91dccc5e4bd5a47f23213eaf4ec97841ff8680b4d575b9773eaba643c0945efb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:b4dfe883e36876b13283b8445ed36e7c8cf6017d2f0f63a60a5e494066ea7e75