dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:295e7a5a08e3a563ffa5fddbc0a486120a1d4d1f3180598ead0c505e48245fc4
Manifest digest:sha256:296e39af4b1483283368fcfb8d1e42c21522b37bb747cf08bdf64aa299ccad2e
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:346d2ed2dd720f1e4c85b3ae8a8d585cd5ce0a9eb56e950c0c718314b055a078 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:e72535b7348ca3899f12f740bf8341a75ab93c56cbb88fdd9727a4225fbc8fcf |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:673dd7e2e970eae93aa24b4bb702b850b7dde573f0595699c8c5c19fb4b2a165 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:32b705ab7d4517168e8b6f934a66ea4a4458e2691191716ab0f8ff90a2e25b0c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:1614080c5016625b9a5e994655d506476aacda69ccb881fe31e630af084ba60f |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:bd99a3994e7781587dd65f5fcabb480f437e61b882845116f33150055617a0ed |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:1522df4d1a8d8a62fd705a3bcd12838e381a7cf59daa5fec261ec67945fbcc76 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:fbe81ccc3cbeedd26b07fa80bf1bc954df8055f3d8b443f805e34d47b46e2dd6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:c417b41b2423dbfd4a940150e56082ae2910353a7f3cdf37bb540b42d0d3e1ca |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:616aecab538b5ac505947b7e29644b183105a71047262d297de520a8f85d2e5b |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:e8e08380d5c6cc08216709b02f7d5027f085c8ba62eca9e5555ab7598be14dc7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:1377f5ada1f5d6dd7f79f1daaa8151ef74ceb38cb17e0d73a57c81c87a47d81b |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:a62c5ba7d3fd1d2ff1fe1c7069fccc10221cb4236af04e3379a01a8f38f42739 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:26162e1c64e3ec991abf776ff2cbbc7481792e3c0700b3dae08d8b2c39c6190b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:e8e539ada1c86de13f6aa6dfbebc4b6eb353133452822d83df546fefaca79fd9 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:38866b6ddf1a202b8b905fe10bd699859318cb39f5fc16e0621879fa1af2db29 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:bc9c5ef6521971f4a812796c10c49f7fd05cbc860cdde4821a40f4fc02068501 |