Sign inSign up
amazon-k8s-cni

dhi.io/amazon-k8s-cni

amazon-vpc-cni-k8s 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.23-debian-fips-dev, 1.23-debian13-fips-dev, 1.23-fips-dev, 1.23.3-debian-fips-dev, 1.23.3-debian13-fips-dev, 1.23.3-fips-dev

Index digest:

sha256:281b5aaee0e4e7735c3823ea4a340f343a42ca4f7a2ed99bc4bf050c6aec6a81

Manifest digest:

sha256:35ff22131fd8ebe8807efaa60f63e9473b9865fd3aee2ed838e220f7dfa4cf83

Size

96.10 MB

Last pushed

56 minutes ago

Vulnerabilities

0
0
0
2
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/amazon-k8s-cni:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/amazon-k8s-cni:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/amazon-k8s-cni@sha256:7d31a015577ad82080c74cb1510b1860ab457bbc7d6c5af48427d6ae1763f100
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/amazon-k8s-cni@sha256:d188aef2b6a3756bd3f01a706b36ac98ac39095d859ce44ae32dfd2022f13555
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/amazon-k8s-cni@sha256:8b6148bb66a4d924194cc3e6a1275e07fb07171bafaa6541b3622f5eec4f8512
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/amazon-k8s-cni@sha256:27f4cb581c90ef1374ef3b8cd39045282885fd5b9cf11058cee14f87859433c0
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/amazon-k8s-cni@sha256:dfa216e8f7246e4b2d5ab5f02350de123613e29afe956024b3fd6168a601f79e
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/amazon-k8s-cni@sha256:305a5a52bdf5c62af0e0f197e5549a01cbc2ed7df0f111a569d51ae848fafefc
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/amazon-k8s-cni@sha256:78a1ab5e772dc739432d876d291e713273474f7a62da593a7277e751f98d0137
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/amazon-k8s-cni@sha256:00573cd1930c8ba9617b9cbd32734669b1f8e09ce87e575a85ed27f7671d97fd
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/amazon-k8s-cni@sha256:89a83399a19a3aa8c267bb42e9a5f4d4d6631f8c54a2f2ab460ba4ee262ecb5c
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/amazon-k8s-cni@sha256:6081bf69ecb2df6053a24de8f521653d2a8311cafbe2c405082ee6ea3b3bb5e3
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/amazon-k8s-cni@sha256:da25dc028e375c4c5c3ac2ecfced64f2f7fec2fcd16f2636cf3ac4a15109ac17
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/amazon-k8s-cni@sha256:73d87734683e46aeb205b0ec538c058351c01e715748586a971ad90291784e88
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/amazon-k8s-cni@sha256:d71ac951c4b7d9285cc856c39d58571f30eaff161254da8d98d24507b04781df
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/amazon-k8s-cni@sha256:687b14455866d46d6bc6d8da341c2c93b756dd675034deea4099e5612ecbb089
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/amazon-k8s-cni@sha256:777aff6341caf8c98eedf93307677251543b67c353341ae02be707cc88a651e9
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/amazon-k8s-cni@sha256:ceaabaa1088e99b1e813c9569b988e27faff9ead4b534d4ef7b9c49822f4dede
SPDX SBOMhttps://spdx.dev/Documentdhi.io/amazon-k8s-cni@sha256:97eb504685cdb516d7aaff0547267d9b308fbe6fa8cb75b9233515babaf884b9