dhi.io/vsphere-csi-driver
vSphere CSI Driver 3.3.x (fips, dev)
3.3-debian-fips-dev, 3.3-debian13-fips-dev, 3.3-fips-dev, 3.3.1-debian-fips-dev, 3.3.1-debian13-fips-dev, 3.3.1-fips-dev
sha256:17c8196a4eb2991dddc6fd0d05bb6756ace1205e77d62dbc87a0a8eee1a4792e
Manifest digest:sha256:6cdd65951bed0637122ee5ff9caae6f1cf2b0880d6084903c192101ab7263cb5
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/vsphere-csi-driver:3.3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/vsphere-csi-driver:3.3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/vsphere-csi-driver@sha256:f98adb1288fb8c011396af0e17f6c8e671df9ab29b9e24e53664cbb5ea271206 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/vsphere-csi-driver@sha256:de1dcd2cf06cdf5cb5e4847f20ec2fb1c5fb38cdc42d94dff01e49deaaa9062c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/vsphere-csi-driver@sha256:3ec37d7784bef6c39ddd609055860e698a931e180b5fec596ab17f7c95990c96 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/vsphere-csi-driver@sha256:75e32f439c09b14400e3646e0c759218c13ffdab8cbf8de337d38f0753c57124 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/vsphere-csi-driver@sha256:bc048b287972f87e5f2ed299968104908229ba57f63afeb461dac80a3eb1cde0 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/vsphere-csi-driver@sha256:4b5f42f94e6e77429a9755992740ac03df4e7a03aa38afb46c3df6b525373f17 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/vsphere-csi-driver@sha256:a2bfdd7fcec016d401e04427c57d5596417485b79833cecb2ba76717d04443e4 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/vsphere-csi-driver@sha256:97017360bc438e7b0074f3583a717d029948bc982f9998dbcfe5dc6a5e0e5975 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/vsphere-csi-driver@sha256:a04fca82920dccdd678a95d4856ac597f51caf16eaff5605f7484b8aa736be77 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/vsphere-csi-driver@sha256:464205f250e04c19cd56cbee53f8a8164e2da69096d24675aea58c1c89719b49 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/vsphere-csi-driver@sha256:6072e12998de5f0b48c07dbf4be69031da6f9516887a8274f1a25c0950443e94 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/vsphere-csi-driver@sha256:8b7a441aa323f98e3ba5b58ac20680304165ae68726d34289634d1020b463fb4 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/vsphere-csi-driver@sha256:38b5921a02d3f4c19d645b74c1d0d765ad653019781f91a85b0bb7065d387cf5 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/vsphere-csi-driver@sha256:86787021a29fbe83bfe7d9c3e4b1273ef7c6946c0a89fea32c518d07cd0fe2c2 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/vsphere-csi-driver@sha256:befca0f25c609817dbbd9982fb3802a51b5d35be6606bbe4fb06f17d1a5e5594 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/vsphere-csi-driver@sha256:7e8df69f7a66ed215c75b96f922bf9ba44d4897b7a8e87aaebf4a92c0e81bb7c |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/vsphere-csi-driver@sha256:c919613139d1afcb5c15cc59055b3b44ab87032edd20f99344498597ead33484 |