dhi.io/hyperledger-fabric-tools
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.5-debian-fips-dev, 2.5-debian13-fips-dev, 2.5-fips-dev, 2.5.16-debian-fips-dev, 2.5.16-debian13-fips-dev, 2.5.16-fips-dev
sha256:15d3f91fbe0fc8debc4e1dc7f2bb8459fb0362a6ebc2902fbc7244747005e66c
Manifest digest:sha256:61a1c2a863fcdd0e01b3ffeaa2d660ee87ed62cb2e05a1f36244e0869964b1d1
Size
106.43 MB
Last pushed
7 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/hyperledger-fabric-tools:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/hyperledger-fabric-tools:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/hyperledger-fabric-tools@sha256:65da5e519bc62254443cea1f159f8706fd292d231cc8e409d992dd8ee10b7540 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:df30699a0d3fdc21beee71306817bbc66546b83c555a2a1a7fbe1f1b5f906010 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:f497d2e28108b237a859cec6251885bcc8923bcb0038d1d1528258ee346d18d7 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:98db17215497f6ea5cd28f4a6969e349b0a43b86718835b2684470d87af04810 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:5e6548933e6a6661d0e24b0f6ff030ccc19c17e02f772c631ad2dd8f9004bd06 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/hyperledger-fabric-tools@sha256:e96abf6c159bb3e6675c55be964f87048fe9ca8eba4781f1ece74870e402b632 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/hyperledger-fabric-tools@sha256:f6f0aab87736aee0e9e7b73a61fe4032a823e41348e21cd89a4dd62ee03cacfd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:de3701e6280151e680214ad26dc82d196e42f39f03a49b4f243b5363a12c5971 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:43755efffcd2c3919bee8fb190d10d68afd29cb8689c5da817bcabf1bd3243a6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:6f2c08b7a3ed5fb86465048a3b37fb654616e0af19c33c3e7540de84bd1bf0be |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:fc7033a412913a04f2315bc9f4781b55fec0364b233e3540bef16480e0055cda |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:7c66f2139b721f44e352314746f0b14ff78e298eb27ebfa301d526952589bfd5 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/hyperledger-fabric-tools@sha256:ac7c4a702bb30e2e7545be15f866c516b36c4b82f7e8d2c26ad79517b7268628 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/hyperledger-fabric-tools@sha256:bf814a62bf30122a51583c09af2d11db24a2b055a3692f51af26f88fe9afecd2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/hyperledger-fabric-tools@sha256:d65868b560c75d2545d41709359a2939b6145841159a33c1b7bf04fe79eb11fa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/hyperledger-fabric-tools@sha256:e888e55edbe39c084ba3cc21477dd0c48387cf1950a46c43836e66044c011166 |