Sign inSign up
CDI Upload Proxy

dhi.io/cdi-uploadproxy

CDI Upload Proxy 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.66-debian-fips-dev, 1.66-debian13-fips-dev, 1.66-fips-dev, 1.66.1-debian-fips-dev, 1.66.1-debian13-fips-dev, 1.66.1-fips-dev

Index digest:

sha256:c4d92ed1b001c1263e0fa1be011aaa7346e033bc6d51d2ddab952aa4d2fe44e7

Manifest digest:

sha256:307ebc1d9566a04fff76cfc0e071e52e80731b3d330cfd97e7085a102e6267cb

Size

48.82 MB

Last pushed

4 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cdi-uploadproxy:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cdi-uploadproxy:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cdi-uploadproxy@sha256:7fa8960385a65947b5b67b2cb2883d66b44d0df5196bc38c026b1828903ca9a7
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cdi-uploadproxy@sha256:99a320d27c388f0e15d1905f77e9c37090315a1d6a6afae6af14188253644182
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cdi-uploadproxy@sha256:a7ffdd87ba79985ff33be3f7d40149b2a35f453620e293d3279c97c83a99f262
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cdi-uploadproxy@sha256:9a2f3cd071a95ccc95ad0fad1b566044f2678e868a969a6effdf951e08353130
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cdi-uploadproxy@sha256:f58800e71054dd5b7cdb0bbb4dee4b9f2f50f4384e405411a85e5d2f55a85f35
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cdi-uploadproxy@sha256:dfce1461a14e9c43139beb658b77de3ca3a4adce55593b153b6f9220081c058e
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cdi-uploadproxy@sha256:59f1aa027dcce2d1089e9e1a6b8b9256a1bbff360d79a85e0f3c61891df01f5e
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cdi-uploadproxy@sha256:a4859251ea562bbd2d996609ed8ee56f43e92b375ec457ff4f92a332ed6bb274
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cdi-uploadproxy@sha256:7704547e4f5dfa18e4b0629f2371eaeff34feca2b30289ac11e6e7e6b6a4f8a5
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cdi-uploadproxy@sha256:808f265358db21f0b7ac0d27e13cdbaec960c9850a0e926a624150e6b172be69
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cdi-uploadproxy@sha256:c24b3a7ad3820e588cb57ac94a6234483a67a39f218a3ebc0426fd9bd3258afc
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cdi-uploadproxy@sha256:fb04babd11c131aac6c1e9039420b7246712bb77d2592793c84bc2b0b9799db5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cdi-uploadproxy@sha256:98584bf9ddb115c38e539b810a3f057445650f5d22e6089147959af0fbacda1d
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cdi-uploadproxy@sha256:796c74bf2cd2ef15e90d4bafdc7a809e7d92233dda2e958dac2c36506f4e4222
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cdi-uploadproxy@sha256:dceb032b0fa1d04574222fb88841c5a06078f338f472497dc32489f35bd638ee
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cdi-uploadproxy@sha256:12ac86787340c7dafb07581f966297b9de77f80d9072eabf3c0e92eb58490881
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cdi-uploadproxy@sha256:fd729e0ca5a767040aeabac453e88ffec426e1126032e776cc7850aa9018024b