Sign inSign up
Forklift OVA Proxy

dhi.io/forklift-ova-proxy

Forklift OVA Proxy 2.x (fips)

CIS
FIPS
STIG
linux/amd64
alpine 3.24
Tags:

2-alpine-fips, 2-alpine3.24-fips, 2.12-alpine-fips, 2.12-alpine3.24-fips, 2.12.10-alpine-fips, 2.12.10-alpine3.24-fips

Index digest:

sha256:118b5a079982afa2ffcb0f09f448c776ffb86f4f1fdedfc93e87bafa5ba63974

Manifest digest:

sha256:9d4f39a5c27b491c74873f793009cc39deb0cfca38110d74ea3b6598df1df409

Size

15.33 MB

Last pushed

2 days ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/forklift-ova-proxy:2-alpine-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/forklift-ova-proxy:2-alpine-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/forklift-ova-proxy@sha256:85834762a7e094260182c4a1bf18ff00169e1af64d0d519d11519836151c51a3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/forklift-ova-proxy@sha256:40ab7e87c755a25ee1a610a397e5bcb2765e9e2014d3c6763e4856ef95b0aa1d
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/forklift-ova-proxy@sha256:8aad66ffe489ef6b90119a57ac417668f81f879c7df552770bdbc767fe4e205d
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/forklift-ova-proxy@sha256:7ba5875ed42eb0526823496c3476f53af60741d706496db55ea7b62431ba4e87
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/forklift-ova-proxy@sha256:d28635c580b5137b192b959f1ac241dbd9cc95e76936ffb62de20ba1f54f7437
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/forklift-ova-proxy@sha256:bdbdacec88aaae6deacb442bfd0cfc159ba77c1fddba36d582a5378558910469
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/forklift-ova-proxy@sha256:49d439da24d0b677a13df03a4f2ceb29289aaf5f3bb4163e76e9639a5bf81ada
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/forklift-ova-proxy@sha256:e014a723060c4c3c8ecfacc8c9680e33c49dbd291978347a2d8ded32a0758c96
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/forklift-ova-proxy@sha256:5f440af5679dd2446a7ab5b7a5d20e5e5ee34b339221ecb64ccfaa1fa9a7abd7
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/forklift-ova-proxy@sha256:368355673dd1d543751b191cb65709d823393208bb2d845d0b30e05f09106d00
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/forklift-ova-proxy@sha256:a5185abb55ea76fdb6d93a7f6f54a6acb12ce885715e9cdfae08ed9f8589642a
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/forklift-ova-proxy@sha256:d494292bf46aaa4f0080d270906e43161964f2e88b9f86e667d1f9de0d4f5776
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/forklift-ova-proxy@sha256:e40297e958815ff55b3d218339a784cb2327a9e06d4ca57be404b9c33212be94
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/forklift-ova-proxy@sha256:c4b41a5cc337865ed59341782a6bf7c49cd4c48714ad6808d54fdb5bbe22beec
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/forklift-ova-proxy@sha256:a4a8017e70446255a9b10fb820862263b4fd999eb251c24e2e18d884685266ff
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/forklift-ova-proxy@sha256:2b50fef5ba1e86d9e6a421b50303c624dfe7aee77e21485b9d06f83f1e2d80bb
SPDX SBOMhttps://spdx.dev/Documentdhi.io/forklift-ova-proxy@sha256:aa7f6b67b0e1248fb1b93e0f38915e588c5226c0dbbd59287640962e12f368cc