dhi.io/kubescape-cli
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev
sha256:98f7998c8bcf31f48f37d2435283d44dd02fe416ab532eb49dcc1255fc331a5c
Manifest digest:sha256:340a53dd1972d99c9a54da2aff239f5fafc0f95f896098cc6729dbb9bc6f773e
Size
117.59 MB
Last pushed
1 hour ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubescape-cli@sha256:691ed9204afe0ab950e582792c376bfb05f096388aab52073d04e961acc7a356 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubescape-cli@sha256:359b5177aba53a40f4333200771a7651907a8fedc5a716af8fa4c0f2624889cb |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubescape-cli@sha256:1ff64faae533ff0f9d6999c3ee966fad00369bfaf227125bdbd7c8b05b0da532 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubescape-cli@sha256:ef7e1d09a4de9a1c683dd090f3de4871e0b785fa75516b48594565d5fb82ac7a |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubescape-cli@sha256:df243d19189ffeb2ec46efc7a33d27dcd46607caa5c9933242117d5d77bc1c0d |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubescape-cli@sha256:7ff2f281a93ff6f148aa1f5b14f1491a6dfe49376d4209835d788a5777acd84b |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubescape-cli@sha256:5ce901f0f7bfa77f13a4c7386e5c1c95587f16191bbb26c3c75b58718844d310 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubescape-cli@sha256:210167bd789dc152238f3886a758173dd73f3d619a749e7397c3dffbd7201b3d |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubescape-cli@sha256:32cd0aa0c800b123c0852075d9bf389e1074116afe44648d6ff23a372e4362c7 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubescape-cli@sha256:77185268e398b8fcec55734b37489894e4c1c136dd589f78b6afd73e6e773a13 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubescape-cli@sha256:280373c362d27553e3e6335cbda6d04009eb329aa267fb4d9097ac5667f0c25d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubescape-cli@sha256:2c89c423ddd6cdb01366bb8aa20f31cc6c67b4f2bc92e3e4ce0aeeb3d310b2b7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubescape-cli@sha256:26b0e3b3f82bc10fb51d3e72139fe429c842e7689e2a407ef7e3b1c089bb53ad |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubescape-cli@sha256:46740948565af968cc1fb83ee1939edd6ae3e2449224299ab7fabedcbd497ff8 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubescape-cli@sha256:6ae7964e5cd6cc313c7e2968767c6c10bbf44445c23f0c7911511b8d3fbd9e27 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubescape-cli@sha256:4ab5ca30294793b5ad3d02409c349b85f4fb464febc11db5ebb58613c7181c78 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubescape-cli@sha256:3a074e807eb35026404cc607dbe080e4e9cdadbb9c5e8021f7b5dd3bedc60734 |