dhi.io/valkey-operator
0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.0-debian-fips, 0.9.0-debian13-fips, 0.9.0-fips
sha256:6981e349c75a5f57f81144246c79a8527cebb83e97a9def6b3b9f053653872f4
Manifest digest:sha256:220295b45f0f7fa984415cba334e981343b495e615f4eeb52d73f3f1916e3f14
Size
25.27 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/valkey-operator:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/valkey-operator:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/valkey-operator@sha256:87bc771eb1f02fb745a111a6030c7248a8fd5e6caf32a45f39066104eeb2496a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/valkey-operator@sha256:92e9a2d428a01dfd9e3a16c011628c4686b97aa1a5bcaa209657b17f79b3e088 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/valkey-operator@sha256:eed448f7c930205b14d20a0ca7d0a43e20e030f687a48e56b110e91af03fc9e2 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/valkey-operator@sha256:a5c23bc192fefe626c266c4ab1afa662da9c06af689afb6ef4bd148e2010e74e |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/valkey-operator@sha256:edd2f616af6f939041612361fb6467ebeedaaaaf0864c4dc0a9a5f907c4b7170 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/valkey-operator@sha256:9e628c4926d2f3c73eeaad7f832edf610f4cedf87222507dffed61384b951df6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/valkey-operator@sha256:dc1d843a1ad98efc5aab9b77b6f04ce76407c7581b40fea7399384ab11ea212d |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/valkey-operator@sha256:be3498e93801769d9a04f4e3133f04b41da2ac11b0af5e85a5ced84ba28cad79 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/valkey-operator@sha256:dbc888a52b8f2964ca5016dbf4e13d1b90da7f525788c5777d9d7a2e80ac4291 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/valkey-operator@sha256:504593b5439258f570f956ee85d68a44d558b16f7700d9daaa69f72e7d322949 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/valkey-operator@sha256:0ac92c62d1b8b36953c23f307607ec8eb6bc2b89a1755441f3b2888bbe22dd4b |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/valkey-operator@sha256:b1a2cd3e25a128882d6a55f1ed2c1a856f5a247bd363512db7ac5c21b9259060 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/valkey-operator@sha256:e2b8ef5a8787d0bbec10bc218912c7aff931acf52c06cd34868e1ee2846f48b6 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/valkey-operator@sha256:1ddc005d7916166032908c2146cfafcf5c28cc560e290a78779ddc14e6de7015 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/valkey-operator@sha256:cdc7c2e07e42fcb13cf6680c99a32fc151cb12085c773fdcaa3b5cb8f4bb9592 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/valkey-operator@sha256:ae34513f5aa70f342beac88ee6b99356b00e12948809e0036170544dd37352b8 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/valkey-operator@sha256:09b235e31fc1e4fcc7585a4288355f3c2f282773cb1dff1c32c974625d4473e5 |