Sign inSign up
Kubescape CLI

dhi.io/kubescape-cli

Kubescape CLI 4.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

4-debian-fips-dev, 4-debian13-fips-dev, 4-fips-dev, 4.0-debian-fips-dev, 4.0-debian13-fips-dev, 4.0-fips-dev, 4.0.20-debian-fips-dev, 4.0.20-debian13-fips-dev, 4.0.20-fips-dev

Index digest:

sha256:5967f7bcdda8654146a426433357960f351af199cc52a5e98ad4aac6b4dcf4d6

Manifest digest:

sha256:2092666ab862ef8b4375222aee8ec05a1c1af2d84b77e54079b03e0751c08bd3

Size

77.79 MB

Last pushed

39 minutes ago

Vulnerabilities

0
0
0
1
7

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/kubescape-cli:4-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/kubescape-cli:4-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/kubescape-cli@sha256:a9aeef6354991c7050a39d857e953f617e9d547d70ce5c94c3de57989b488b94
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/kubescape-cli@sha256:674f979304b5dbfd7c28ae1f8b51f0d1b6e530280a913f791a2d5caa2b885f9b
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/kubescape-cli@sha256:2a94edd8ea381fe6bb5ece61ecb24a9214e3201ec1b3b977041d6c6c2489d8e1
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/kubescape-cli@sha256:ff3dd1f8af6e85bb61f5bd1e9dc33a1b87d44bb6f592f0751ba0665c0ff1a699
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/kubescape-cli@sha256:ff39625666a36495a81edefa9af6aa2b4bcb25c8dfc2193f939fb225115d6e66
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/kubescape-cli@sha256:1c3c79c3efd0a0e54f65f58f374e6294ac58679984544f7c598cb3afbbc8cbfd
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/kubescape-cli@sha256:7ace237eb3f28ce5ff3b4120a325a72c81e94df3533d5b9657264e00fa38b192
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/kubescape-cli@sha256:91b4f0b0021f86ad911e90a178b01ed5f9e93fb5667813ff09cc1688829ae142
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/kubescape-cli@sha256:d7877a2b579657b6af2e9442c41796a1c09518bfb355656905a5e1a1808d9b6a
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/kubescape-cli@sha256:1680f8d6ff69f56337b95f943dd48b02403d2af0d8ab2bae63bd6d9f3ade4202
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/kubescape-cli@sha256:77af6fa3d3ed8e867850680742675152b581316820a553df795a32de7f64d305
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/kubescape-cli@sha256:e37e3c7c62b43b73b3063e12f2d0f32de5ff4cc4993069af7df77838383aa260
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/kubescape-cli@sha256:5b3a0d7d491872aa37ea24a546b85996cf8a09f1821c7454778bdfa89cd8ffe2
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/kubescape-cli@sha256:1b4b85b32e46c57340b5518d434142a0eda18e2fb6b28ad73b5140966c32abfb
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/kubescape-cli@sha256:0b1398385ca42b1800a9a7c569874d6e9e541e5f217931259b7772560d43ddc3
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/kubescape-cli@sha256:5b13b8779c3721942d455da8f3073547ae56f3d18864d9836b215cafccb33384
SPDX SBOMhttps://spdx.dev/Documentdhi.io/kubescape-cli@sha256:5e23b28f319c151269a596d353bfde143e7d5d978513a05690b4bff15c991474