dhi.io/amazon-k8s-cni
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.23-debian-fips-dev, 1.23-debian13-fips-dev, 1.23-fips-dev, 1.23.3-debian-fips-dev, 1.23.3-debian13-fips-dev, 1.23.3-fips-dev
sha256:ab537c12e91bb23466bdfa2ae10fb03f5678dead64603dc8ec878911eaa2be0b
Manifest digest:sha256:53205a7a81e6b8f5a56f565a13612e3e2b9ec370adca9fecc739d0d29c361632
Size
96.10 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/amazon-k8s-cni:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/amazon-k8s-cni:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/amazon-k8s-cni@sha256:9da93da7652e4afd6a5f13e84d478e81dda929113e9b7bc7a05af094627339e3 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/amazon-k8s-cni@sha256:88eea32bd159d85f871bf599b1c35c833230f3c027490dbc06c741b0777e21c6 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/amazon-k8s-cni@sha256:608397d7fccc2a64eeabf62edfdae9b0cc757142162263389125551b49e9bea9 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/amazon-k8s-cni@sha256:83068149abbfa1b60019b666df744f9dc9711178873eadb026215a9bc1a9d1cd |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/amazon-k8s-cni@sha256:87820fc880392fa49f8a17f27dde08b43c5cecd53ce5b5b2726083cb09126bcb |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/amazon-k8s-cni@sha256:56720be3fd1bbbdf116c3b225eb8528424cfce7ba3d374e446f9261ffbdf6cad |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/amazon-k8s-cni@sha256:8c0b481fa68cd53c7e8f579b8178b19770ab30c80d4e4c480bce79f6711510aa |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/amazon-k8s-cni@sha256:be347602f97adda2706715a880cd21f52f739a18b722a87d85094e856beb654a |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/amazon-k8s-cni@sha256:2944ad6561336b57ea261e59bd1ee891fda6dd14e714240c64d0586385feb189 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/amazon-k8s-cni@sha256:4de2b66e13c060ccfbf4ddbf89ab23ec5fd7250ed17521199d4e44dba40d7133 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/amazon-k8s-cni@sha256:8ed05282220ecfa7e6c712fdf50f9a4d3bfc33b25f76ab4148b9cdca47ea0321 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/amazon-k8s-cni@sha256:d20b48d29bca7a151ebd0c647e48e1434d60e0b21cd40f3c2ed3a50c6a0ccee3 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/amazon-k8s-cni@sha256:9ed0512304d7561652329953835667a768c27522583174cd414f76e06a4218f0 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/amazon-k8s-cni@sha256:6a8b2fb12d5a47a832f03eb610e488ac06d22949b5d61fa6a5ce7453797f166c |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/amazon-k8s-cni@sha256:dbbc225ea70b5a60d95d402e2452b5f39b3dfa543efac090c8537fa1a9b67320 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/amazon-k8s-cni@sha256:fe20d158e620369a6c0c944d0f5afcb7897fe35d2beb50caa3692566351de88f |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/amazon-k8s-cni@sha256:39d0bea9d9d4357047fa60f8b05ea63e10fbc7fd84f584e0c6c3357fbb738f7f |