Sign inSign up
ktls-utils

dhi.io/ktls-utils

ktls-utils 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.5-debian-fips-dev, 1.5-debian13-fips-dev, 1.5-fips-dev, 1.5.0-debian-fips-dev, 1.5.0-debian13-fips-dev, 1.5.0-fips-dev

Index digest:

sha256:309c3578de526647adc4e49cfdee179ebb365314143875a576977036258b1100

Manifest digest:

sha256:74b02abf97b8c3a642af99cdb72cafab2dac4b3f238e55f6809425f6df09e71e

Size

28.11 MB

Last pushed

6 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/ktls-utils:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/ktls-utils:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/ktls-utils@sha256:1fe627be78c2c1b80d8b7db0a237a9bf50ca03928fb17135988133aa35f7045a
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/ktls-utils@sha256:b80331e25e309f37b810ad91299a5928b86c433d14dbf3c2b3e597e56c18ad35
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/ktls-utils@sha256:9f6be4fa0554638c38a119ab46d0a89a4d2ce335bae53512ffd92fabdfb6db45
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/ktls-utils@sha256:5f149a96a1825be3dd56aeccd80b0cdd9f588b18e78166f6b2dfc6c77e7c92cd
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/ktls-utils@sha256:e55d95121dd6274c0dedcbf0cbb911c95cac6b60debdb4b5262fabdf18a95732
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/ktls-utils@sha256:6b857d4322606d44ad6098c84d92f7b41af6a37df4eb166f9c09fdf214bc0d98
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/ktls-utils@sha256:a62d9122a7e578e74b68bcfd927f1f2d288e38cdf1ddaf8dcd733af6a0297788
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/ktls-utils@sha256:e281bc9ffbc9f6d0b6fb6c583b0618d1df1fe78002100d44167d78b123e4da9b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/ktls-utils@sha256:5ff09173bfa40f6290697562ffb71ac379cafbc666afa2ba1d2e9cb8c3a33bad
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/ktls-utils@sha256:5bb789c2862588d8322879a34ec187adfc65ecc496cce3473a126ef1ca5e3ccb
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/ktls-utils@sha256:580374e7a978ccabcfc6272595b0d1726b23f06363ca6c00af9f5a11280cb794
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/ktls-utils@sha256:828637e1b9b385f38ed5d61fe84d17872c11f39a6a1a2064a0740d62dfb120da
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/ktls-utils@sha256:21476ec625857b1492f5e4bd46fbbff0e1d527350d9320202a0153401c67e908
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/ktls-utils@sha256:86cdc619d5baefb46c7756da3ed66847af1cfc12818cd7e62dac860afc1d0d86
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/ktls-utils@sha256:48883f5f92a61baa467130688d7b0c348defc27b63907675e384ed30f11a6a65
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/ktls-utils@sha256:ea28345f4605fb0301d2ca34e37088143ec85812ba8da2345d3fb2413a55189f
SPDX SBOMhttps://spdx.dev/Documentdhi.io/ktls-utils@sha256:eebfe8c687f57c382c80002983865fc51d4f449cf8f9a3ed8bb0a5a4487bdedc