dhi.io/openshift-console
4-alpine-fips-dev, 4-alpine3.24-fips-dev, 4.22-alpine-fips-dev, 4.22-alpine3.24-fips-dev, 4.22.22-alpine-fips-dev, 4.22.22-alpine3.24-fips-dev
sha256:451d504e34356a18fced388e90afa517081616f5e15fa4e0ce5532475d439622
Manifest digest:sha256:5bc1101f5fae6d60f63a60dc172504414747cbbd81db050d3e826d85d7b677ab
Size
61.21 MB
Last pushed
1 day ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/openshift-console:4-alpine-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/openshift-console:4-alpine-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/openshift-console@sha256:b4e4f0cce8ab3dca7d09140ea8bc9de8764b224a2fb32cf524ef8baa00ade559 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/openshift-console@sha256:62f9d6116caba9209cf7f378ebf76d53c6ef1d5500d4924388bd81add8dbb6a9 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/openshift-console@sha256:85f31f978911bde8e3ad29371cf8e60733828e103142a994a9c753fe0594495c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/openshift-console@sha256:86a8520059df82d49ee696ce2a23a30bbe5d8faba18af41fdb9ab41f4bfc1f30 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/openshift-console@sha256:a36bafded18a68d6b752233d717f3e22d1a8482ed3dc89db2badd3cc3f270847 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/openshift-console@sha256:c5c3c690fcb6451db626bb4a864d2e7fcbf37c7b0feeac769a9d99c4b6455d14 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/openshift-console@sha256:de4617887c1fd9c9314383521326b68caa56189a5fe2d1b02ad7c3a1bdebcd23 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/openshift-console@sha256:c50a616cd372cb5a0bec3a973e986c58acef6d975c74fdf041f92c48823855b8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/openshift-console@sha256:2f5aab84bd66b0fba33c0eb43e191d318a88cbacd1426086408e817421c2f139 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/openshift-console@sha256:00cf19b146fcad9f23b311c2fb3467953865f3c3f329945193430f33f72624bd |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/openshift-console@sha256:f14f013ba96b90c623c2098d297ceb4d5b5f3e3d8c6862e6b6eb8d3a1f624f55 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/openshift-console@sha256:4e8f1b2daf202b2f5bf10ce479cedf7d2c98a70405ba95ed0af5d52c76602257 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/openshift-console@sha256:08c4329c57c1ad313ff5f07212f37863617394c8763364c0f7c0c4ed3fbeaa80 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/openshift-console@sha256:0d74d84ed259d5c3f06dbc1b35057eb2dba05777b5b88b72a50db2901c1f72ed |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/openshift-console@sha256:e0c22081dcf84e2bd9b8abdbefd03131318a536b9562ebe63aae34febe342a22 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/openshift-console@sha256:5fb0c4b862621d73704669076187614e401670c2cf10cfde2a0798aec708ad33 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/openshift-console@sha256:c3657d75c001f76db1c412dfced7995cc21072b064f3e8da0b9f11eb19c24cd1 |