dhi.io/populator-controller
2-debian-fips-dev, 2-debian13-fips-dev, 2-fips-dev, 2.12-debian-fips-dev, 2.12-debian13-fips-dev, 2.12-fips-dev, 2.12.10-debian-fips-dev, 2.12.10-debian13-fips-dev, 2.12.10-fips-dev
sha256:2735cc7c32a61a5ee82695bc2fce790772a8b53786f068972e70eebef2301e56
Manifest digest:sha256:7f5832c86faf2b2b8ab5fa618f12d98e80149e610093eab2787a9b0f8aff9477
Size
50.38 MB
Last pushed
9 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/populator-controller:2-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/populator-controller:2-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/populator-controller@sha256:3cea7a038571f6f40a269b5d6dcfc16e559cf85cf2be5bc8134532dcc4f58329 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/populator-controller@sha256:605cd685e30fb10ac1c5e73e0a3609177d8ab85dc6b600b9391d698d5bae9d34 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/populator-controller@sha256:c71b673cb76b7a79e1902dd643168a64a1ac4d553bb394dd5be80a5102d82ba8 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/populator-controller@sha256:6f02f2d15bcde9634cab1ac4e3f67a798f710a2615c842aed47d1d3c3daf7322 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/populator-controller@sha256:e7e6af51b5107d41e0b951a9d0a140c25e87ac4de0b02170653a6f57226f97c1 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/populator-controller@sha256:335c447cb2bf5f0dc96f0abc9830a72d7d6c8ee90a22fa302119a5096b745c5c |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/populator-controller@sha256:fa353b4775c5f81724a18946177da8e7fd7980d85b0ffe34839c5de181c7ac44 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/populator-controller@sha256:407aca57ceb2a53363f519d3621069b0bf19d4ae369bceb1d590bf33d9e3276b |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/populator-controller@sha256:37b4227330fbe2018d3c21657ddeb91c6d5386092dcb6e9390fae1eaca273547 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/populator-controller@sha256:2f007c647aa44354e00007631d71622aaa2710cd4afe478d01bd591d186275bf |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/populator-controller@sha256:860c17c745c6ed04237844ebb9c241c5cf375941172b06d39db1e08b81f8ec84 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/populator-controller@sha256:208d3788de2078e6befe5fde8273eabb1af3a43d1f43bdcb5ac7a4695704cb11 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/populator-controller@sha256:059c6afd367e340d83d2c0a36ea94bcbd68cb418b2620f8d6a010009fd60a42d |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/populator-controller@sha256:215b9ecb69a32f78f0ce2bd369cb725927af4fef54a444946ed6ad0a5f2e419b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/populator-controller@sha256:81d26ad75c773880712eec054c31d5af40f2ef126f19f2395c3caac6a919319e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/populator-controller@sha256:3280096a6491f5d3a3655573f67cea9518e15c889374f122372a26667569d82c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/populator-controller@sha256:f87f8f971c01e77a888899ef7aa3c158f1d78e76307a12cb921692aa2c180206 |