dhi.io/kubescape-cli
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev
sha256:c122fb6df4fb1b14f366075e8a7564a3dc73431381671735b0fe180d485cbf94
Manifest digest:sha256:47d3636755825c3ba685b7a1cc0e012540091e08a8bdce5ac21a63117db14f7c
Size
117.59 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubescape-cli@sha256:f9f20cb355ebd05c8c8325426499c4200c04b62ae4655359d0aff1f76c80ae11 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubescape-cli@sha256:bdbced40f3d4d0e4a7e7acc19d82218a7ce2c4ffea705678a25ab12b95c9d3a8 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubescape-cli@sha256:b812c570ea915b0f9e0cf5304d2d33af6939cd4d0426f296251912e4bb55f669 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubescape-cli@sha256:a2c3dd2cb70a5610d1eecedff1b53e29955f79bed7b3456ba1b00c83b1abf1b1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubescape-cli@sha256:bd6bfa0511755985993cc9f167a9db5ed834c3b9cb4774e80823daf16bea6038 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubescape-cli@sha256:ab37b72431ce0cfbba6e5596cc305983e69ccd990c06710e771806fb628e3692 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubescape-cli@sha256:3003197ac5f49f39b6a9bd3a3e185a4b4f5229ad067a1b51fcd52af659d1d11b |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubescape-cli@sha256:c61efa358ed1967952a8b9395a94aa2e475c1d09555b02da2a75008012837e52 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubescape-cli@sha256:1a089d5e9f9a97af37a28f3048f673cdd31a522dbd9b042d41e36067e411e07b |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubescape-cli@sha256:ddd6aefde6d655c6b75336d5ad7a19f24d537e67b078556e27af1b6af8076e7c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubescape-cli@sha256:431aef95c9b11bdefe97bb447e26e266cc5d46389e90b73e3dcd50b2436939f7 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubescape-cli@sha256:9459aafd39bc46bf6ca5815da974c29b69bf5205711dfa560cd4866ce6025ecc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubescape-cli@sha256:62ef81ee71b77442df94ca5f97e51e24dc818c59cf4a878316e5466a5daa3b3a |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubescape-cli@sha256:5237bfb2542a5f155c8af762cee6c218e4550d0acd5949eff3cb84ad4fdb731d |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubescape-cli@sha256:fd6f72a665f99ff7793b3b113a71a9219afa052f396a0fff2849c14dc130c883 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubescape-cli@sha256:f2ad0382465639d60a350a7bfd56e1ddb5cef15ba810e2b7f94bbff6809d6568 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubescape-cli@sha256:d6eba332ba457cb1026f07962c3f982ac0466e7667a8a818a29d0085e09e502e |