dhi.io/forklift-controller
2-debian-dev, 2-debian13-dev, 2-dev, 2.12-debian-dev, 2.12-debian13-dev, 2.12-dev, 2.12.10-debian-dev, 2.12.10-debian13-dev, 2.12.10-dev
sha256:4dbb8453ee55c810c766a148a0d2f32ec240eabd12d80514a70e47e149095ddd
Manifest digest:sha256:ffd66b0c3b502eb170bc383af22870bc5323b8dbba88220e4fb1e1be51961815
Size
79.71 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/forklift-controller:2-debian-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/forklift-controller:2-debian-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/forklift-controller@sha256:dc8a0c5d8f2ec425ecfa0501f70ccebed9343483b7ffed48f35fe7c89bff8d17 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/forklift-controller@sha256:de39a5f71c2e3f69e293cfcb7dbb7f0fe00ecd058760d55d600bafc28436a6f3 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/forklift-controller@sha256:acfff3de8d38f3337e3989b63a112868ad81d81a2fe4306eff96c4e89f1165a1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/forklift-controller@sha256:bdd6701de10d202f931c667abd3910b95bb807c1cb4eafd40e9e6cd6d1148e51 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/forklift-controller@sha256:a708f39d1b1d85b58241d0b13543d27394cb64582c5a99793db281aafbde6d56 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/forklift-controller@sha256:0807ca2bdbc9ed020eca177d5e24bd700f6a21dbc832c0d9dcf79dc8592570a6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/forklift-controller@sha256:7e23e03883add098dbb0d5563f00393455ba74acabf3829acba779ef66be9dcc |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/forklift-controller@sha256:7d2bef6fa50704304fcfce47ed57adaad5789e67a9517aec22c0c514c3d680d2 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/forklift-controller@sha256:5f646b4062f1a3d95ace3956909bf1e0bc462a7a6190502cfe1a8c7d91d62015 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/forklift-controller@sha256:38297eb2375c7331e3257ebb16965830bc9c6b725a72b0bf8040c59fee3128bd |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/forklift-controller@sha256:ff7f0beff3b03b21a9b4fd1d9726b77e2bec9b3881ebe8f8f338e3379cb65943 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/forklift-controller@sha256:35460c9468a79f8f904ff2f0a302f629eeebe9f3dbab9cd7f4cdaa173d6cf2a5 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/forklift-controller@sha256:e837e262313f248fcdfd4ed1032ed93066c052bb862f682e9adb560a73d9f9eb |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/forklift-controller@sha256:b2f5d01e2c4fe7f7ec04a2f2ced09509ab8d2d898807d241afcef4281490cdb6 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/forklift-controller@sha256:8a7345cfdeef8f0dc3a5cc8baebbac3015586e02d67217939b9260ef5289dc02 |