dhi.io/valkey-operator
0-debian-fips, 0-debian13-fips, 0-fips, 0.9-debian-fips, 0.9-debian13-fips, 0.9-fips, 0.9.0-debian-fips, 0.9.0-debian13-fips, 0.9.0-fips
sha256:9edd284d03a11c50d17cd13ece6e03d5e878f0474007897bb8e6024607f30876
Manifest digest:sha256:8ee9c266f29339eeb2bb82b95dbb1a0a168ca3155b53d214e05ca12408d36505
Size
23.38 MB
Last pushed
5 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/valkey-operator:0-debian-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/valkey-operator:0-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/valkey-operator@sha256:7067b4224339710dda072b94bc0d1495e8ee05cc39aa095a5cda1eab9bc0c07a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/valkey-operator@sha256:3f2479745730cd3494333287676b143afe0657367f65cff718b67f9d21061cd2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/valkey-operator@sha256:5f288500d69d50deb4664d7b8be200044943ebb30bf9fea966c5db25794bc219 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/valkey-operator@sha256:d14d087708675aaebe9e1696afcdee8f1b25a6751b3d4277b165ba06c0b622b3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/valkey-operator@sha256:b54c1480823a1fc288bcaed3929a55ddc9ed6006a40c6bb02937487139159da9 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/valkey-operator@sha256:5a45d9c37d4a6edb8f8112199e5ec61883b9b4dcb4791e052ede1bce6e6152d9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/valkey-operator@sha256:19728ac2b18e8eed60216a3e98e7c776340f246119e05dccc49df2bfb22791f5 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/valkey-operator@sha256:1b07796dd1e63911d6f7b2e1673528507301fc1167c16df3eeb36235593642d9 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/valkey-operator@sha256:0ed352af2c9ef9ed6cd07a6de677cd1a4ae977c6360b8e12b017f19f6ced5c83 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/valkey-operator@sha256:add2661c6e57c39468fcfb82494dd7c4141da7c0538e56a477ed502cacc82caf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/valkey-operator@sha256:0858a78b8eb4b48a049294d37df4e61d4fc131de436f5b7ab3330701538a3a9f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/valkey-operator@sha256:47f1a18d1e73be912bbf0ce5d4bac1e48e76362d5b6adc0e3eda85158b550221 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/valkey-operator@sha256:60169d391592c1d9ced47370433aaa2499a8696f00313b322c98630f7dea7144 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/valkey-operator@sha256:88392383ee15a85158df852efe6c3ed8f8a548e523fe314f3c3aad888eaa1665 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/valkey-operator@sha256:6d3b7b7b0a71d591c158e081b6850023c1bebee7d9b9b40761673c9ed7ccb15b |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/valkey-operator@sha256:9113bce95075e9275cc36c7122946cad960fc998337e85b1b7cd2b9108777f10 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/valkey-operator@sha256:53429fb570f3249d31c7d69beb261954f07bdd045aa5c70a1d2a5b98d1711ec8 |