Sign inSign up
Ory Oathkeeper Maester

dhi.io/oathkeeper-maester

Ory Oathkeeper Maester 0.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

0-alpine-fips, 0-alpine3.24-fips, 0.1-alpine-fips, 0.1-alpine3.24-fips, 0.1.14-alpine-fips, 0.1.14-alpine3.24-fips

Index digest:

sha256:294d5b269fbb8c9544ca23978e8a86b8d62794eca84aee331c94bd4fc4bd31ae

Manifest digest:

sha256:3eb55675cc33f065fd9ad777b81cf3b74aab7148c2cedfb71024c8c262b4f946

Size

12.51 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/oathkeeper-maester:0-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/oathkeeper-maester:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/oathkeeper-maester@sha256:68cea5e2890a82b68cf2193efc695f90869ad629d41f6d050501afd33094d9f4
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/oathkeeper-maester@sha256:4cb304739cea637f7cc357cbfba5397a20ad39d7b9d96aac289150be9772341b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/oathkeeper-maester@sha256:da7f30789837a0d0ae97badc211b42d69e71f8c6a11b4836b02a64c8d8ae9bf4
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/oathkeeper-maester@sha256:4bc80d791cfb5875279bcfd999a7c175c673ab2a5e39cedbc8d5898b97f40c79
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/oathkeeper-maester@sha256:0ab54435418755bb4e8d881f8ec9befb37828cf3a3809beac5290e0472f6ea6e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/oathkeeper-maester@sha256:ee86956d73ed5ffdf275af29fd7c5efcc3ee1d573964391418088d9cc3d25230
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/oathkeeper-maester@sha256:e31b1e289d6d845651d8f8f1e27301fc08657698c0f3504f95f2efad9efaf3b8
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/oathkeeper-maester@sha256:7cf2f565e49b3bff330dae169cdf5fe26c25471f32d64560e7711991fb029d0c
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/oathkeeper-maester@sha256:7519d26023c46bd5ebe0b729b043486f9acd48ab9e73694b2e13d44603e23ee5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/oathkeeper-maester@sha256:82f5c5d11d7dec9d2846d43503785e68ff74b4f39c9c020942a8497c3375c98c
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/oathkeeper-maester@sha256:abd03f5a5399ccbeb37318fb6edb3b0cf845862f111e2388f1f3d232ef0e294d
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/oathkeeper-maester@sha256:d1716608752e9d834e2e40871790a23f57c00371d841d2d948b7223aa201d818
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/oathkeeper-maester@sha256:b6d554ce085a2d70f535bc23c45979fa363cfa6d20904fe6d226b50cf168c6fe
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/oathkeeper-maester@sha256:c2cb0dfa39094b221f580ce543197899f1bf913fd7aeabd18d61086987e88964
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/oathkeeper-maester@sha256:480541ea6ab6946fc1c27b3c8a96e526ae0a802d573dbbf4d739d4a364f57cba
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/oathkeeper-maester@sha256:493a9a52eab5069a3d867cd33dc8c98ceb8eecc6f320a0cba70288ae517d69ca
SPDX SBOMhttps://spdx.dev/Documentdhi.io/oathkeeper-maester@sha256:00f2b4cee1d1762903e755ce0ccc429ae63977a7a3e19ab6542344c4e71b2623