dhi.io/mongo-express
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.0-debian-fips-dev, 1.0-debian13-fips-dev, 1.0-fips-dev, 1.0.2-debian-fips-dev, 1.0.2-debian13-fips-dev, 1.0.2-fips-dev
sha256:16c2883d33b60ea684d0cc1c073545af64e5dfa3a19b449821e95a19d589c252
Manifest digest:sha256:9d33f15ebb96c153372eeb72199001e295c1407deb054b4139b08fc87ec7b040
Size
63.08 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongo-express:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongo-express:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongo-express@sha256:fd716601ff99cd706bb07011bad726ed7db22d31afca93cfe780f6040fb2398c |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongo-express@sha256:3548978fb4a179338564942fa739045fc15705a3d3a86b3230c058c67a558264 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongo-express@sha256:078b5acc4f30ca23fd79e05d40a7b1912051dd05d0905334eec7a04dd504797a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongo-express@sha256:dac33a619dc1857342c26e2ad9ad4d4f147fc2e473cdc2c5e34dc457229d4f89 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongo-express@sha256:de7fdce7291d83fc50e7e27b5918b7969e27fb524da68e9b52fb16367d83cacc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongo-express@sha256:86ec80dd3646cbddb052d4d7ca3c6adb531e227638830d93a1a7244d39d3a24e |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongo-express@sha256:a830d8b47a4a3cadb42747152acf8a9f13803f2ad647e5ffe6db9c8a2fab6ea4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongo-express@sha256:4aa5faf1c61ee3594743fddabe898ad375c7914363edfd9be5f9b16968710d8c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongo-express@sha256:a31d83f25c912e0b49b864789565818bd35f9ac51f52728692e3647db6f13a81 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongo-express@sha256:dffd7728c1c9e4ebb5ad2ccd93399c3675851eb6830c473f2491e9fb33c6f593 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongo-express@sha256:3292dde3b864a95a6d031db8776077e4471ecb526886ec6968e4bd57dff727a3 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongo-express@sha256:7a6ec3b2fccef60dbe9fdda389ed623f465a08206418312436046764daaa5f40 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongo-express@sha256:b94214c845983fc750eedffba906968d74b3b32c0ddf2675f3bbe0c502f48a3f |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongo-express@sha256:4ad6c63df8d6dbaf9d306f0c5a9bab65c8448c7f02ecda7b54d4bb98dd0ccc63 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongo-express@sha256:fee34e37702b0fe4a58b43f00235dadca2de92332b3cbd8a1d3704831915253c |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongo-express@sha256:4549674da637eaae2e8b2c79819716e4abe049acc2fba0c153f9a30ad4e88f99 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongo-express@sha256:5497bcf79822aadab6e60e55e7fa65e17b4cb57afbc0c0e531a78433484419a0 |