dhi.io/kubescape-cli
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.0-debian-fips-dev, 3.0-debian13-fips-dev, 3.0-fips-dev, 3.0.48-debian-fips-dev, 3.0.48-debian13-fips-dev, 3.0.48-fips-dev
sha256:b10a73199d219e3856454113f036bf6faf3e5fa962dc3eb82d31f7c05de119d5
Manifest digest:sha256:e8d81e80d6608b983db5e65d3f90308d09efb013ec43ac97573f4be61a3afebd
Size
117.61 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/kubescape-cli:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/kubescape-cli:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/kubescape-cli@sha256:26d78b651f170be97c54ab5c7941539c9d3edb379ea804a25f47e68a9b276cfd |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/kubescape-cli@sha256:9af6904d70967de4c1093ce5c9187419f0890df883b6199ea51f51e6b6e90b26 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/kubescape-cli@sha256:1f654e14fea062f223960c2981e769347ed155b789fc6fdf4ab86bbc1809e9bc |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/kubescape-cli@sha256:0dad8df9aed7f730f6032f3495aff4b7dab4b8d5879140f39feebbd60e3adb3c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/kubescape-cli@sha256:86b88695e1d158ecd972b39b6e7eaa584e06b6592aab54656056b9aa69f43ff8 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/kubescape-cli@sha256:c6ea49e11773731c81eeeae08390aa6b2f3aa7fc28edf402c33d2ba60bd0a404 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/kubescape-cli@sha256:9dd99fc66ad181390a49b48de20f0fdc301773296d9917e5940598af70b072f2 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/kubescape-cli@sha256:f69f18e925734045d58141f35c09532fffabf2a91e7a2299093375b94602da78 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/kubescape-cli@sha256:247211affd1d249a6b8b06eaceee29560f59a877ddc37f24bdfd517a928b200d |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/kubescape-cli@sha256:bf38eed5920b0c596ff064c15952786904d5b5c82e631799614f3c2e97cee913 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/kubescape-cli@sha256:78a5631be899677130e61e4bdc013890b104678bd6ee02cbbba0531e9703ca22 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/kubescape-cli@sha256:5d605d742f5d2a6dba273c49987f93bc93a64ab89148b798270934d1f5533a56 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/kubescape-cli@sha256:530b0500f9715daf0e03461574f9cdbadd103086e17097f4f18f3dc4feb775f8 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/kubescape-cli@sha256:0b1810da799a95396d2f0f099566a9fc463fd55c5d4df45d041b5335c242f0d2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/kubescape-cli@sha256:6bffb5779f0beb66be62570b83951f503d884fb78df535706b1242533fd5f581 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/kubescape-cli@sha256:741ecb9c13022432e1e014e7b414768aa86baa36795f34bc1180f0021a2e9b67 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/kubescape-cli@sha256:d1fa154419238bf29e57e2e2f0f593bea5808dd155d96b2fe749bb6198698e3d |