dhi.io/datadog-operator
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.31-debian-fips-dev, 1.31-debian13-fips-dev, 1.31-fips-dev, 1.31.2-debian-fips-dev, 1.31.2-debian13-fips-dev, 1.31.2-fips-dev
sha256:5cffa2efb3551fc814afada678f19d3a1f589a9c3d6e9faaf02b1308ebfadf44
Manifest digest:sha256:eb56fd7f61bd6f04c0adccad49cc4c238d9490448c0341ee1dbd6d1516bdc465
Size
90.15 MB
Last pushed
3 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/datadog-operator:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/datadog-operator:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/datadog-operator@sha256:b4fc359b708b54325f56a527571d9ae5e7191a62902e7ad86cadf2cf2ee684da |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/datadog-operator@sha256:bd43753ea2b65eeac70704927bdc03f1d029555a51714988cafbfac0521990ea |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/datadog-operator@sha256:c9c51ee462e3287426553e7ff7704270134f3a3cb23f1c5fcac6ae55e2b0d6a3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/datadog-operator@sha256:dec931b865efdcdca50e3586c5a7f5519081a3301d361f673339cbf07a26fa37 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/datadog-operator@sha256:f4981639d42df007e4410cf62fd786da53781a15032bbe50233e99cc9371d213 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/datadog-operator@sha256:a2e49f85f6c6f0355119ad8bcbb76cb39e8038429c0d0350141080dc366bdd81 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/datadog-operator@sha256:b1e6b360a790c36fa2080ff0ab16cb957fb3e39dda41bc094660a2918be30e83 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/datadog-operator@sha256:a85a94d6e845531923ce5a3565dcbdfd06a9b4c3b2945b07f9cbe115f1965d2b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/datadog-operator@sha256:faa16a764778acbbdc5fff92cc1e83ad2ce8671a4433ebf0f4dc075eda60b2cc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/datadog-operator@sha256:3f834ef2fa8b9a1dbf6ade4d8ecf2073102be6e12ce15a60f5109f6ee184ccff |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/datadog-operator@sha256:25698f160b711a1d72319a92d029e19dec22e988b25581a99c0820a502c7156f |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/datadog-operator@sha256:c49d779c756e66f0235d6091dd36547a5143ef1394b32d6486d11896493c9dc9 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/datadog-operator@sha256:49f12e992044ad22bf7e77ff71da69de2a2d84032f89af4a5958b175c881c108 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/datadog-operator@sha256:95db61207c68c713dfa0a7cbaf4f5cda9395b3f67cee0a5513a66129a198c316 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/datadog-operator@sha256:26e3edaea41f8944434b250ba85d5743b8f158b440514babaf85869dd4f4c78e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/datadog-operator@sha256:7572ff72435672117184555dd4a79a3f326ae6c222793e1fba8dc8d308c08bcb |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/datadog-operator@sha256:9b7f6ac15c9515aa08e5895b67a411b4f216541a5a95159be55343c8b8a0c99c |