Sign inSign up
SpiceDB Operator

dhi.io/spicedb-operator

SpiceDB Operator 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.27-debian-fips, 1.27-debian13-fips, 1.27-fips, 1.27.0-debian-fips, 1.27.0-debian13-fips, 1.27.0-fips

Index digest:

sha256:d64a7d8ebd95a354a167f316bde566991a6586b9276fc3297d064cd15639876b

Manifest digest:

sha256:46bd9c65c04febaa3228442477e2d5c079fd9cbcc5ebcb9eb215b2bfffc89b43

Size

26.12 MB

Last pushed

16 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/spicedb-operator:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/spicedb-operator:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/spicedb-operator@sha256:3c6dfab94503ac94a3f3b7f8e7207d5915d101143c182986b4e0fd5113d95028
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/spicedb-operator@sha256:8b3d640e7b880cb7c6a11476224ed67dbb7a1ce7871799e5f068b159168f13a6
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/spicedb-operator@sha256:8444d4c92f91f325feb4d454795efaf9cd30500b755520c8e165af7169b0ce3a
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/spicedb-operator@sha256:39c231eb670d74a00028b512578c68a883f64940d02bb876642bd38d54c16416
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/spicedb-operator@sha256:fc6a79974d76fd25675c9806a338d7c57ab11b73740d92525942296ee6e4c4cf
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/spicedb-operator@sha256:8b375c87da0ff49b5ec18d1f39c1d32d0d80e01f054f55baeaa3ab8ce95cca70
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/spicedb-operator@sha256:b50eb9d78e821b160f34d086ba6d955a106d635f1197bf48b77bc1dc29a73165
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/spicedb-operator@sha256:0910bf8a5ae8632df3650ea9984b3f85a6720bc457bae4d097cbd418b4e54289
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/spicedb-operator@sha256:253dd008e98fe70d702fa585ac718ebd236e6be32bcdf40f454f042a210f09b6
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/spicedb-operator@sha256:7dafbbe1aea01a73c796ff432eaf44f0573f3207f40ae1666eeb24de44ad28a2
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/spicedb-operator@sha256:a79ae7caa94cae56826095b6752bac197dd61fbeafb2caaffbe7e704198a34d1
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/spicedb-operator@sha256:3f5a31639242306a0eacf0efdf8b6ab245e4d1716b927627e423cdf6161269f9
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/spicedb-operator@sha256:9fd0e1cf41ce635ac99521c3d44150bd7634c48b60e19c0869ff4b47eceb4ef7
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/spicedb-operator@sha256:3c5ae0044c9881ec4d4ceeb355db86df0a9b424e483425ac008d37fa983c90ed
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/spicedb-operator@sha256:f07c12179fc352756b7e64ada6a57ea498c5426868a71ed9773c67322203fbfb
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/spicedb-operator@sha256:62ecede856a8c796edcf1941717261d88205ef6ebf626187482a20656962d5de
SPDX SBOMhttps://spdx.dev/Documentdhi.io/spicedb-operator@sha256:58de307a23224826ed969687bf23273775929929d2ca7390507217a491d1985f