dhi.io/redis
Redis 7.4.x (compat, dev)
7-compat-dev, 7-debian-compat-dev, 7-debian13-compat-dev, 7.4-compat-dev, 7.4-debian-compat-dev, 7.4-debian13-compat-dev, 7.4.12-compat-dev, 7.4.12-debian-compat-dev, 7.4.12-debian13-compat-dev
sha256:f8290227198e54362a558aa968bb2232d0d4f87000f065311fa06696bfb5e43f
Manifest digest:sha256:7ec1afac4372e8a068403228a1bb4ceeaf182977bbcdbd96d0c3575bd822be14
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/redis:7-compat-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/redis:7-compat-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/redis@sha256:de70f4212439b2099236045e68e1033b157bb16ec7f1c2199c1abbb3cd7e3402 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/redis@sha256:c4f959e1ad59e65f0cb7f04b36b12cb5500d8ba366bb0884ddbd4358161820ba |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/redis@sha256:f09f9b0ae24204a79de7190fa2f1660244c6ad251f748c79c20b213ccafc3f74 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/redis@sha256:faf909248ad62280219cad9355aa2ba9dacf4df92d1ca3633e304692ffb743c5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/redis@sha256:dcb534a670eea2f8683ad42b68acae80a1a2ef81585a1c72174574f8b52e0010 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/redis@sha256:d5293c37e3e3f455950d8313eaf82b3d6ddc523012743a43e649c4e832331034 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/redis@sha256:dc1d6eb53579ce1fedec43c302bdfa539fc73cbb37da4286c732c0bbd85aa2f8 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/redis@sha256:1eec7e589797f320841d1693913ae43a3f20c1dc39397d2aa67eebcd79ad24a1 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/redis@sha256:ed75d427eb006c8c7350c8b7ec027896c7cfd86cc9ea1ac4c78e86390b618ecc |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/redis@sha256:295f347d9155ba2cf6ccbdfdd216d3850c849032304f9527be965e2b1cd3a8af |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/redis@sha256:4ba94ad64cd2a20bb70acecc974dc47f93e5f0db576d3ad34b33eaa38be1d282 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/redis@sha256:872a0104b7962c3b6b271a0f4a7e727daae2f0b0af5fe5afedcd63bfb0017438 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/redis@sha256:c95f0d18f3145431dce88aca17af3af3f2b536f6ff1bdfbd7e36609cf6eadcdf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/redis@sha256:14dd3506ee75a29a4829f09a97744f1eb25a24f37cc8e1d3a63815749bf773f5 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/redis@sha256:10e6cefc1edf5be76c42360f28dddc69b0ec1d3a06fb6632cd4f26ee3df6771e |