dhi.io/strimzi-operator
1-debian-fips, 1-debian13-fips, 1-fips, 1.3-debian-fips, 1.3-debian13-fips, 1.3-fips, 1.3.1-debian-fips, 1.3.1-debian13-fips, 1.3.1-fips
sha256:bbd78b0138b11596298d08ae919f02ea00f9ba3cb2663f69e407252fab3bc04a
Manifest digest:sha256:7b8c31b84e2a13ef79c7d607ba68bb492c691cf39106bccc76ae5242010bbc48
Size
149.49 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/strimzi-operator:1-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/strimzi-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/strimzi-operator@sha256:6595a5fc071a39106acd5901894af8c209847cb901d2f4055448bedc20634cb4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/strimzi-operator@sha256:c7b9376b88de9be8a96bdbcf78fa515921b1b442f9d3f53a7c7f778f0b0049ed |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/strimzi-operator@sha256:c2b990c2340cb75e0995739db4d6641c903ea1da3d757f7e2cf491063dba3894 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/strimzi-operator@sha256:51a2a2e27973c39dacd272d386cddace526eed089eff3f3dffe99aff66a67188 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/strimzi-operator@sha256:d8b21064c432aee61fdc9fb0d0325e6f5c762bdb7fe57a6e05cb3153cf6857c6 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/strimzi-operator@sha256:dc989b8fa53d30a35d866c823742e8e7aa3c152d5c40405f954c5f6d02df11fc |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/strimzi-operator@sha256:1990f9a19003dfe0cef0c6aa725636487de2292deadc78d9820190344bc60414 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/strimzi-operator@sha256:32ecfe832632485d42bd045cb49eb09e0eb015f2b1448426e536e35b13c69f78 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/strimzi-operator@sha256:b5ef7a6a8233e8198fccf769c16968fdf345a25d4df6c2e338a856a28d7518f1 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/strimzi-operator@sha256:2249be2b1b717759ccc26052e7278e71ed6623f26d0e8635a9c35d2151d79eb0 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/strimzi-operator@sha256:f85f68cefa0e5bca698a0485449bdbd16e4b6bc3c237ac792ec3ace25fc8dd13 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/strimzi-operator@sha256:780dfe3aecc062bda7c17ee47715595bc5cc802c87ea726bd4dfeba4e55917fa |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/strimzi-operator@sha256:753648f7ae7cf2fecf1e81d1b7796a96994d034133261923fc3d3414f31cb37a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/strimzi-operator@sha256:fa48afd9230a30a07a919fb0b215ec0050cbcba40b5c79f8eb7b5fe2b07c750f |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/strimzi-operator@sha256:67048db08d090641f878d884cb7333fd02df15779a1392c6a7e69d0e05f67802 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/strimzi-operator@sha256:afb2840abf0f05ed49d606900d8f97e3a846dd2a6a331301ce26b3b56f553c95 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/strimzi-operator@sha256:07e38bcdf01d19986e9ad6837e287996b25e6474425d8f4422696e127f1366a1 |