dhi.io/mongodb-kubernetes
1-alpine-fips-dev, 1-alpine3.24-fips-dev, 1.12-alpine-fips-dev, 1.12-alpine3.24-fips-dev, 1.12.0-alpine-fips-dev, 1.12.0-alpine3.24-fips-dev
sha256:02e2419171307a7da102b3e4e51b546609edd51f1d61a08c9213c1d708456754
Manifest digest:sha256:0d272ead9dee7f55746b2a78f22a1685d09aadc982125f8841309fbafaabb988
Size
39.42 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/mongodb-kubernetes:1-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/mongodb-kubernetes:1-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/mongodb-kubernetes@sha256:91e48cf328b3990c9be1bd2ffe801a66b0375556c74c9a824074bd7ca2fe11aa |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/mongodb-kubernetes@sha256:18b17427d2f771694e3370f20b75eabbe6544a17f1d7e1e29934965ec1552529 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/mongodb-kubernetes@sha256:0980cd83a5935a666bc8ba6463a7397ef77e07e028185c33f45335458719367a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/mongodb-kubernetes@sha256:2a74d4abec858dc8ee937c9b80885e1ff6d03ff094c5935d7040f174b2801e67 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/mongodb-kubernetes@sha256:3126c9e048d41515bb3c94f6e0254246ae4e8266a94bcf2df8b25f558686d03b |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/mongodb-kubernetes@sha256:563953b266e00306690e013af144840287536ab46797a67c8241dd5c24c92aca |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/mongodb-kubernetes@sha256:0b1a8bc88561cd34f53c8b83f78734494f025e800c9c845a8b5b897a93da0755 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/mongodb-kubernetes@sha256:6efb18c5d1200c816f05ef42e46fe13d705e8a7205ef16578054a94a9070c742 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/mongodb-kubernetes@sha256:0e8c1eb95520f9cb48d3d7724741ef16a68479f271893b14f692ea4cf5b2985e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/mongodb-kubernetes@sha256:d8faa34f3de0c060c13ed52223323749afb9f844032272423f032f176fb3817e |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/mongodb-kubernetes@sha256:16551823855e75b2b171f9646740a0d8e6080c090b33b05c7365e05272bf8c49 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/mongodb-kubernetes@sha256:cd3eacaadb863d7f92258f565cc180b4e21c8fc16c1007c51c7801cfe55c6902 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/mongodb-kubernetes@sha256:ee0092248005d331e3e1fe6ae40488e00403a001918af51d17e55db78cd4f345 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/mongodb-kubernetes@sha256:d33c3dad4e7e0e13461ea1e2b3e9a16ec01a39f6c7e2b6447ffa1b790dbc4cc3 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/mongodb-kubernetes@sha256:8dafb14a0ef0e4874c5a9ed2c5a482c1c4e33cd0ed42c52e79c97d7c182ff200 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/mongodb-kubernetes@sha256:dac64ba16d3df8cdd3cdef45f65aee2f915ac6384cf97a59c75d1dab304a762a |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/mongodb-kubernetes@sha256:f6b97a425fdeef7abc916285f28d0a0a6a5a65d09d66d9a9d03c669d572cdc03 |