Sign inSign up
Valkey Bundle

dhi.io/valkey-bundle

Valkey Bundle 9.1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

9-debian-fips-dev, 9-debian13-fips-dev, 9-fips-dev, 9.1-debian-fips-dev, 9.1-debian13-fips-dev, 9.1-fips-dev, 9.1.3-debian-fips-dev, 9.1.3-debian13-fips-dev, 9.1.3-fips-dev

Index digest:

sha256:0618cb5eeb578a62f35c9f89e1fb94f72c2f5726424fbe9c3fb805a4998e6276

Manifest digest:

sha256:02593a66cb23e593bb3d23dc94d368fd25e0368e82e9915290633f4df6a329d9

Size

77.83 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
1
5

Support

Active until Oct 2028

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/valkey-bundle:9-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/valkey-bundle:9-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/valkey-bundle@sha256:3655c9ffe1b9ef9637c59a463a81974c7a7254ff4089a2fbd50bac7811a35714
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/valkey-bundle@sha256:a487c02905f260425d44181ff188e6cb22e4a131f6683cda95e9f83e921e5ce1
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/valkey-bundle@sha256:9e86ef124a1cb6fd4301ab187e4ff50dccb6d30d7bd53c7503c99066392d5734
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/valkey-bundle@sha256:c2e0d02fa261696ff2b500911823b06a5d12610a711353acfdaa25a088d59f33
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/valkey-bundle@sha256:dc71077fb63e118f3331f46410cae91b490192eba775e26e85a6c64cf0c04f14
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/valkey-bundle@sha256:8694593d5d2a60ecd1bcbc5b20cfd6bbf02f9fcfc02f86134f628b33fc5f23b3
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/valkey-bundle@sha256:eb0efda22db4f4da10b72406007e8dee23bebd3388559c0e59e20114da6c07bf
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/valkey-bundle@sha256:755abddcd2b77be4797a96897522b9b0554659a25c61ab0eee5b566d23822f4b
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/valkey-bundle@sha256:fc5d4da407719c02834e928ae1687981f0c3d80efd99d149f56268fc7a14471f
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/valkey-bundle@sha256:6029b81cd8ca944a928d7c46802e5c2f12f3b34e2b542f7007ef57c71039e148
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/valkey-bundle@sha256:d2e821ff4ecad5cec5dc006ba5e9defabde6c665eb1513a204a4afe0238bf06e
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/valkey-bundle@sha256:241f8c51759deb5c0b47bb41ed125b4febd633f93c50fe7e06cb9a49359d5020
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/valkey-bundle@sha256:d5675bbc89e7d70d2255d7647168e50f3dd3301dfe5d38a1e58eca4bad232474
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/valkey-bundle@sha256:e01a4345dad82b1829ed0d6b3626dc95aaa4931a60bed6f81a12df764b95ad89
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/valkey-bundle@sha256:f0b1ab60934bb9a3654f8b70f94afae3776e4a42dc0af2d8d0af29312b88d702
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/valkey-bundle@sha256:4aeec8981747358fe05604f2127ea06de6cee87c8e189770d2a5ae153cc3def2
SPDX SBOMhttps://spdx.dev/Documentdhi.io/valkey-bundle@sha256:b92441badcce2870748c136eac14502fa9e0c5aaedeb396119457c8974781c26