dhi.io/netdata-agent-sd
0-alpine-fips-dev, 0-alpine3.24-fips-dev, 0.2-alpine-fips-dev, 0.2-alpine3.24-fips-dev, 0.2.10-alpine-fips-dev, 0.2.10-alpine3.24-fips-dev
sha256:67cad154f7339026890dcfd7a4d6c775d8552e31e43fcb6e3fc339b7ce37b46f
Manifest digest:sha256:c3b3caa3d254ac316ef5700b5e88aafd34de8379aed08075ab8f4140852651c2
Size
16.70 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/netdata-agent-sd:0-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/netdata-agent-sd:0-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/netdata-agent-sd@sha256:54b631deead2994707cd3ac35db8fa21f5ec24471acd5ee0e719f31d177fc923 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/netdata-agent-sd@sha256:baeb39c7f9d99b97292ff57a8f042a13d38e2c52183f641f0bb8e600ef8fadee |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/netdata-agent-sd@sha256:f729a48290e96ee93d6155835af4d552bd6781c2ec04dfa0d5ef9812ba4c9051 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/netdata-agent-sd@sha256:2a163c6d926f700b396cbc37c73fb789ab97087adfca6f5669efe9ddf0bbf443 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/netdata-agent-sd@sha256:0dfbf212b2cc7eee5e1db0c3293bb1548cbe4f7044cb923dfeb6e53a23798f49 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/netdata-agent-sd@sha256:500b2252814ae484dade99c0b182940adff639d634f6c7ce873f0ec89fa18f10 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/netdata-agent-sd@sha256:3aa63428f798e4c0a7496dd7b92a9346f9cb81210421b925360a910d191125bd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/netdata-agent-sd@sha256:5fa16952f90eb20ca77b359129be7c50ec21ab0db19ca12cbd6bc327c554fbfd |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/netdata-agent-sd@sha256:3a293f39717bdb0c4671f748b596d32f42d8b6093d3ec2e43bd1c93035c22e1c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/netdata-agent-sd@sha256:b920dd6e3958e66f73dcafc25d345383f8696fb0ea2913a1f1b60f9fc46ec5f0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/netdata-agent-sd@sha256:d2da1c681f7a49b6c7d8e5e2c06d8e0749ece91b69412c982328712bfba583c7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/netdata-agent-sd@sha256:dfcdef30bbd8445a1ca090d3b33ebe250eabc16058cbc17de1afce3e8b86be92 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/netdata-agent-sd@sha256:7aad67e63abb3052292e8d69cb4ae446768f9fad6914f736a46dbe8aaf9732a7 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/netdata-agent-sd@sha256:91af859f21525a3466be268ac7bc37589477de4f9288cd74cf6d22fa2869e6d7 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/netdata-agent-sd@sha256:943732895b501dc5b8b411006959b64f3b05ab89d262de711a76d60d99a55a3b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/netdata-agent-sd@sha256:20998db17c6b307f8a5a2a319112431005de3fe5acea50d554d021535548ab6f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/netdata-agent-sd@sha256:7825c3d2fb3c6d41d610a445db9871edf818d4970218b26e23626fa2a49a9511 |