dhi.io/python
Python 3.10.x / Socket Firewall Enterprise (sfw-ent, dev)
3.10-alpine3.23-sfw-ent-dev, 3.10.22-alpine3.23-sfw-ent-dev
sha256:c9a89c766a68012f87ac417a13551fceed8b774e84da29bd7fe30d1f72b05395
Manifest digest:sha256:8c22f5191a45215d04436f8bc0159c2c4b8157ddbda5a55672ff80b82e8d98e9
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/python:3.10-alpine3.23-sfw-ent-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/python:3.10-alpine3.23-sfw-ent-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/python@sha256:47f7c2889c8fe4cc864fb926b630021420770d3b689e6e3dcf58f66bff970fc4 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/python@sha256:e4e1583fec6bf8679a27ecdac9489a505f4fc1a78613c57bf3a0bdb5f2088d71 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/python@sha256:a1c877a920a2f0dfe6e46132b08809d0ff89dd7932b4d810236160a7df24a060 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/python@sha256:bf697cffdc40fc9c244098fde34c9bb8508ea9da852e28528a2ab4a780eb3058 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/python@sha256:3c8108e697ed3516faeb2d9bf09261b021f89329c16e9ccb43501fb1e116af49 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/python@sha256:0ac3776cd8f81e6488db18edb131139cd040f82e567cdf31a0dfbc371ffd19c8 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/python@sha256:f74d5e40af8d08e63e2d758407c89af77c07e65e88116fee22bcc279897493d6 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/python@sha256:ac76c45a0b45b584cf5dee51f0fd4fdb681b0806fc3aa753523d668b9eb7eb73 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/python@sha256:c35b8b37852412c1c8f2c1251e594585eb27c586615472baf80450e6e28ba989 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/python@sha256:c9df1ec6743ba239c180109f7c7da9cbca001b44cc3aff58254739403cec2bfc |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/python@sha256:0c89621d447343f1d0c2099d43219adac5bc9ee10fd262f6e98ff4758cec9d84 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/python@sha256:5633eb0740bf845bcce7a5e21966cbb5648b1a3497dd227f57dfe01cc850e352 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/python@sha256:4d56330a03313f4248546d8cf74c3b0639a061bc2fcbb86d973fe6f159aacf90 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/python@sha256:2fc0926f87fa54db3d252aa66e19d8eff6f9216443bb34f32cfcc6557f58b585 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/python@sha256:6efc8da7414ef3fcb629f10fefb68cafe48bfb382e8cbc4b530ddb580350a924 |