dhi.io/node-exporter
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.12-debian-fips-dev, 1.12-debian13-fips-dev, 1.12-fips-dev, 1.12.1-debian-fips-dev, 1.12.1-debian13-fips-dev, 1.12.1-fips-dev
sha256:7e6ac4fadc403c025efcd73762e2582bf4e02ef28afe1b0229754cc990bf6f8f
Manifest digest:sha256:b57ed43bb24626c1c52b83e1fa01f96a57d032dd7ce431afa6885716268579cf
Size
35.01 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/node-exporter:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/node-exporter:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/node-exporter@sha256:123cfc5359f585c28db69b57a12f9877e7f68da6a07c0bb43725e2765e69a6eb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/node-exporter@sha256:cbb82d49ac612138b2ffd4044c5e6d1147322da9620bf380a89e29c2ad8eb54e |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/node-exporter@sha256:699e7d90c2a65261f1ce532aa884b4665d3a57a60806f454b78d65a5a43ad239 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/node-exporter@sha256:10511c9033e140492813516a8f351b60f277c794d01d60f94dd7d8cede1f9e27 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/node-exporter@sha256:c1952d83225aa680db3cd56eb30578f231d9f17a8ecaa3fe773733b45adf19fc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/node-exporter@sha256:ce3f0c8bd27db19066013d7112eb0c8de663bd8933a57fb95c89e2f4ee73dc1b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/node-exporter@sha256:4e74bf9d7852f9b799cea565213140a32bc7030bffd31705b2a57c13fd3b0028 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/node-exporter@sha256:6c3d8c798e584c241ba199f7b80a5a0a353b9973935dc43c007a30deecf00582 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/node-exporter@sha256:3acda939910c10d92798b866ff64825ab2de8db8afd298e7766d6dfa7762363c |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/node-exporter@sha256:ce2898d9b7def85c85b5d41c3a7ed6e7381cb60f1594f82d72569e66645e9ea6 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/node-exporter@sha256:75bc03cace60bc18a519b7619667cc3cdba0e6dac8bcf29b9eb7f353bdb2f3ac |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/node-exporter@sha256:f3d5f23a7f24c9529f278c4960852776e0c3d2eff9a94bc27634c00ef9ee9e86 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/node-exporter@sha256:23de3c1c9d2cfc42fc0cd702cab82148d91c7dab788515273954caabe9a9aaae |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/node-exporter@sha256:4d75789b9fddd61798011091bc7a1ca484284f7fef56e56a15b198dc4bfdd1fc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/node-exporter@sha256:afdd97287a244349526af652f4babcabb601322f5a2634a7f00dc482eca43992 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/node-exporter@sha256:03d517ea3e5e632e59317b42f2634cf077d8c36721acdd3945caf4811d30fe24 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/node-exporter@sha256:8648a4c4c24d30a5aa5ad0500111b4650dda359463cd82737aa3f188c7bd8260 |