Sign inSign up
Open Cluster Management Registration

dhi.io/open-cluster-management-registration

Open Cluster Management Registration 1.x

CIS
linux/amd64
debian 13
Tags:

1, 1-debian, 1-debian13, 1.4, 1.4-debian, 1.4-debian13, 1.4.0, 1.4.0-debian, 1.4.0-debian13

Index digest:

sha256:990f43d24bf75e92242d7bc4dd79f6a717c6ab05c60997a9a5cbda77c526e7d7

Manifest digest:

sha256:07ff6dfbaedec106f54aaee79790a89b4f5f712c76f912babaafa3d3715efa01

Size

24.41 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/open-cluster-management-registration:1

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/open-cluster-management-registration:1 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/open-cluster-management-registration@sha256:1b373df12b6fb1974cab6e56cbefca1a7a983a5a5801d41cf9c96b8b987dc9dd
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/open-cluster-management-registration@sha256:3a5cdc487637ac17bbae17cf653139eec05eaa4d192ce02da01724ab201c9e11
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/open-cluster-management-registration@sha256:4cea3d5d8c514d7436f270761eda130a257b2dfde7c7dcb35e3c070cf5c2e4f4
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/open-cluster-management-registration@sha256:98a0a8d865a4c5804379fb17d86247c9776da6999d698c67f22bc20098eaaa2b
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/open-cluster-management-registration@sha256:62094e84534560d932c2df3af38bf821a7392f15d58cedd1b717b52ffa378be1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/open-cluster-management-registration@sha256:28bbe156d7b58c920dd1c8b0b7d4437e3fa3eb2f212fb07752f3bc050deaca97
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/open-cluster-management-registration@sha256:778e134ddf69ff9599f3259e363fd940c7a8883145fa45226289551698540548
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/open-cluster-management-registration@sha256:1ade51a31ef1137b926ed871ee1074ec5b6595cdb50ff0d786c32153f9a25e8b
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/open-cluster-management-registration@sha256:53b1de84abd0721a9c5796210f4723e5933047cde8796e60699eff780ce0e318
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/open-cluster-management-registration@sha256:9f49915fd88fb44be934fcdb71b9d2b652ec242e18f080edf939121f801a1c71
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/open-cluster-management-registration@sha256:94401e476a7d0117d69e0d8e5ee340859bbc96be91649b6135f2c2058bad790f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/open-cluster-management-registration@sha256:6ad9208804b33a85f8d922b8bcca1b90b7fa1bc850889003650eef2bf5d6be1b
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/open-cluster-management-registration@sha256:0fb71b75c32c07ab2156154a9d1cbdefa8b14c71e9b6144ea016da56617b3b66
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/open-cluster-management-registration@sha256:5d6185af1198bfc5290612fef4639859722237f6bbe5f4ccb9b96579507651f9
SPDX SBOMhttps://spdx.dev/Documentdhi.io/open-cluster-management-registration@sha256:35548322ef3af4add413f70395db004955b1f044c2441d4cfe15ac7bf8a698ee