dhi.io/populator-controller
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.12-debian-fips-dev, 2.12-debian13-fips-dev, 2.12-fips-dev, 2.12.10-debian-fips-dev, 2.12.10-debian13-fips-dev, 2.12.10-fips-dev
sha256:b8703eaa565282ce9fc1672f5b3cd9a55cf63d8f504d89ccc79518ebfb284463
Manifest digest:sha256:47b52777c30e9ff40a535633a8e9483efffaf64871569a803dbbe6810b3a7d4c
Size
50.38 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/populator-controller:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/populator-controller:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/populator-controller@sha256:1e7bdd43ad829f1b6ab3fcc159730790fbc2d962959173efda4e9d5f7caf4ae3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/populator-controller@sha256:9d2d35c632a4d979de0b6f8c4a1303aed7e64c853734b587b2c67fe614e37954 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/populator-controller@sha256:b8025000cea5216595218dd7fd6dcd7fe24cdfc98dd2bf600c33229977baa7a1 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/populator-controller@sha256:6db7c889bf3777593da9b672630eb3cd898a51c1420dcd08be8b448bb68beed5 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/populator-controller@sha256:721991ba712e989ea27fc794aca4f8c64c05b4128e557a574c8b06db8acae0c6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/populator-controller@sha256:7773557ba8c9a56bac574ff56a0659bd5cb94a63cca0373e70f3f3d1da23f213 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/populator-controller@sha256:0688cbaa8f142a713d3dc2ec1969f7376c0d5cbabac79fba2cdd2d0ff3e9e18b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/populator-controller@sha256:16487655cc46aae1bfdf227357cd76c61d343c2e5dae384154263618e76741ff |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/populator-controller@sha256:c28d917dbb8ca05c3345bc05089e4a9d0197a04f0081902908b82abfd66f7952 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/populator-controller@sha256:b10ec3c4c6d688a1b09576374bc7afda5d555b6ead5cd5f54196442d256e7fd9 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/populator-controller@sha256:9e108343eb87caa195457011f9cd39d83744cf15a5c3d0c61fedf828ca977ed2 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/populator-controller@sha256:183be9d5ed092ba548398e17f398361eda325f78c43d3973129f469e510497c1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/populator-controller@sha256:4890f66567d9d482ed303a442978792324f6d21a807850b376bc839a8bdff082 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/populator-controller@sha256:011b1ed3b8dc73fc77226da4ddd14b3e2ada8a23665ddeac3d3e8e437af129c8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/populator-controller@sha256:651bbf3330073eeef366a1578c512df321ad59396ab893f369d20b66c072ceca |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/populator-controller@sha256:d23c9b34b8a0cc134ca30afe53ac8af484b13ff5d24d0f21c44fd41d6c7c8603 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/populator-controller@sha256:012540e2f5b7b2aa0b10034b8a3392b725c0d75dd4a2b78a9d7a73d08cdea67d |