dhi.io/oathkeeper-maester
0-alpine-fips, 0-alpine3.24-fips, 0.1-alpine-fips, 0.1-alpine3.24-fips, 0.1.14-alpine-fips, 0.1.14-alpine3.24-fips
sha256:294d5b269fbb8c9544ca23978e8a86b8d62794eca84aee331c94bd4fc4bd31ae
Manifest digest:sha256:3eb55675cc33f065fd9ad777b81cf3b74aab7148c2cedfb71024c8c262b4f946
Size
12.51 MB
Last pushed
2 days ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/oathkeeper-maester:0-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/oathkeeper-maester:0-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/oathkeeper-maester@sha256:68cea5e2890a82b68cf2193efc695f90869ad629d41f6d050501afd33094d9f4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/oathkeeper-maester@sha256:4cb304739cea637f7cc357cbfba5397a20ad39d7b9d96aac289150be9772341b |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/oathkeeper-maester@sha256:da7f30789837a0d0ae97badc211b42d69e71f8c6a11b4836b02a64c8d8ae9bf4 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/oathkeeper-maester@sha256:4bc80d791cfb5875279bcfd999a7c175c673ab2a5e39cedbc8d5898b97f40c79 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/oathkeeper-maester@sha256:0ab54435418755bb4e8d881f8ec9befb37828cf3a3809beac5290e0472f6ea6e |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/oathkeeper-maester@sha256:ee86956d73ed5ffdf275af29fd7c5efcc3ee1d573964391418088d9cc3d25230 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/oathkeeper-maester@sha256:e31b1e289d6d845651d8f8f1e27301fc08657698c0f3504f95f2efad9efaf3b8 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/oathkeeper-maester@sha256:7cf2f565e49b3bff330dae169cdf5fe26c25471f32d64560e7711991fb029d0c |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/oathkeeper-maester@sha256:7519d26023c46bd5ebe0b729b043486f9acd48ab9e73694b2e13d44603e23ee5 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/oathkeeper-maester@sha256:82f5c5d11d7dec9d2846d43503785e68ff74b4f39c9c020942a8497c3375c98c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/oathkeeper-maester@sha256:abd03f5a5399ccbeb37318fb6edb3b0cf845862f111e2388f1f3d232ef0e294d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/oathkeeper-maester@sha256:d1716608752e9d834e2e40871790a23f57c00371d841d2d948b7223aa201d818 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/oathkeeper-maester@sha256:b6d554ce085a2d70f535bc23c45979fa363cfa6d20904fe6d226b50cf168c6fe |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/oathkeeper-maester@sha256:c2cb0dfa39094b221f580ce543197899f1bf913fd7aeabd18d61086987e88964 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/oathkeeper-maester@sha256:480541ea6ab6946fc1c27b3c8a96e526ae0a802d573dbbf4d739d4a364f57cba |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/oathkeeper-maester@sha256:493a9a52eab5069a3d867cd33dc8c98ceb8eecc6f320a0cba70288ae517d69ca |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/oathkeeper-maester@sha256:00f2b4cee1d1762903e755ce0ccc429ae63977a7a3e19ab6542344c4e71b2623 |