Sign inSign up
Strimzi Kafka

dhi.io/strimzi-kafka

Strimzi Kafka 1.x (kafka-4.2.2)

CIS
linux/amd64
debian 13
Tags:

1-debian-kafka-4.2.2, 1-debian13-kafka-4.2.2, 1-kafka-4.2.2, 1.3-debian-kafka-4.2.2, 1.3-debian13-kafka-4.2.2, 1.3-kafka-4.2.2, 1.3.1-debian-kafka-4.2.2, 1.3.1-debian13-kafka-4.2.2, 1.3.1-kafka-4.2.2

Index digest:

sha256:ade6eab003d19997eb67bcc446212120649727499cf64b6b39d791da4ffcba5d

Manifest digest:

sha256:8e0df49341decc294a5dbe1889ad5f7b846981adf9ee31d2deb20b9ed9da2c19

Size

311.86 MB

Last pushed

11 hours ago

Vulnerabilities

0
1
2
0
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/strimzi-kafka:1-debian-kafka-4.2.2

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/strimzi-kafka:1-debian-kafka-4.2.2 --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/strimzi-kafka@sha256:890d19e001aa6b5f52ca76ce73a4d8ec661ab2af179b3ab73c38f8f447727306
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/strimzi-kafka@sha256:ebe740a8e31bc80326fc2b3232384bbba8fbd9aa04d90878c986549a1452d3fe
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/strimzi-kafka@sha256:9b4017a0544c7d009383151610a20709246567c391befc3b7dac81434d24fdbd
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/strimzi-kafka@sha256:a2c3c3b39f5f67ec23b7d396854f538dbe670b65464cfe5b9262f6d1f1e3fa8d
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/strimzi-kafka@sha256:a854908dd77c30fb1816aa81fcebcff1559fa26a955e30a64019ad2a37c1c8a1
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/strimzi-kafka@sha256:99c15c13c87a904b9927ffbdd730a94b8f5b64a95c2661d001a3d438afc67b97
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/strimzi-kafka@sha256:f9a972c7ed2b9d92b7987eb8f2cad6dec96d1d88cfd370905af0735e477d631a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/strimzi-kafka@sha256:6081757af03475ee9e46a9db0cf42ce4a1b6205ad00859e208f600c86296b6a9
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/strimzi-kafka@sha256:4d3b5f5791898c444753a8ad62ebfa253c5de64ceec86359220dc803d52c5528
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/strimzi-kafka@sha256:a623feb5446323e016eef44b71858f166bde6ef096dc3cd206ad89b0791f5f45
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/strimzi-kafka@sha256:406073b179f568b7adcfd6f1ceb8b5de94d60eaccf6444ad5c7fba117e5ab39b
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/strimzi-kafka@sha256:6a6b79bed490f6cefbb93760f1267c713e6efdaf4704dc068c6dfe66c6072191
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/strimzi-kafka@sha256:3c98d9655f16733363448258a46585d9e74f99ebf59316e953e8fa3b45a759fe
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/strimzi-kafka@sha256:10a135292ab0386ba68ef45a3ad4b570d885fe48f14ad0d22b6bd0db15f28492
SPDX SBOMhttps://spdx.dev/Documentdhi.io/strimzi-kafka@sha256:0a9602e35f2482316c7d09150c54fae35c86a571a7f01dd1c5459cf829c218fb