dhi.io/forklift-controller
2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips
sha256:056593742f1e1324a9cae6e6d6e9f6e9ef9410b1e9dd87b1115f2319360486d5
Manifest digest:sha256:b565fb1e523270731ba197e595c1b3e9560db64ab9ba85202e2fa088a8e587ef
Size
31.71 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-alpine-fips2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:dad37333c93a1402389d5cf0de94ec489bda12b42c77d83d412a04db16bb1aed |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:11b2d3e30c2af05179d02b2c95165c1643d2c2f61f3fa08dc1f2840d2cbe4b5d |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/forklift-controller@sha256:1f325408534de2f3c78050784e0ed0ffcf71517a52ef8d2127324e2cae09779f |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:7a0c88a9f8d664c6de5a358caf00c34e9618c53a37d1ce2d2c1722cd64e003d2 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/forklift-controller@sha256:290b1bd75e1dab3f01d7ea0905eb676d9caae3bd06357dab6438cb847f21ca26 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:90eebc8759d65a5719e0c8cac78fd118b1a3a3a7432e822131d40f92eb21a5ab |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:307cf53d8470a0d8d57da8efe659c284e71f231bdaac18f3009268408196c288 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:39fe2cfb88e01e39d1d09056dcbdd45972959e56c9affdbfbcc3a5f730d3b0f8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:881bf8d0789f8d0cd6e92d5fd29c115ab40536a06d64888e44d2a643cea56f9e |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:bd5c7c010e66d2513006b763118b26b1ca2b90a197f90eee78380322362b05ed |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:17d376efba35b9db458977d58f6ccd4177b456967d0b6378c0ae3e13238180d8 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:8b2c8323e9128b3a627b42654e5c689c52f50da010473a39cad9df8553231266 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:65601fdc6ce5ddf6dea0eed0269c973ff4cf6a349f4db7dfd7aa9282aa4c229e |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:b8e96ca1aaff9d822fb618594f012e3c9540441ec6dccd116120a8a8430e1e14 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:53c16554faec391e02d6f1a8eb2fd434ad590d70010408b6d4cde91de62bbd28 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:e2e5060d50aed1796455ee4a719c9ed61c6fdb1ce5bd507c0b5cd12b24591b67 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:78f640b9a6e4062f3f2725b11284e86c9da11273f0158baf0bdd5749b4c9e3c6 |