dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.2-debian-fips-dev, 1.10.2-debian13-fips-dev, 1.10.2-fips-dev
sha256:d09437d525500c428a2da22b42b0212f5b37117d3aa88bdaf4faac2445db68d8
Manifest digest:sha256:5a404fd0c7c5b2b9f7e045d16994c1d182020f03a85a45c047f91a666e690823
Size
69.79 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:352f13017e80e39dcb808e5f5d527f9a623655151236055bf0dce310c15212bb |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:b10e6c9aa41acb4eb00cc0651ad14afad4076da6416e2b6b48bf5d7265ef0dd2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:685b839e8ba6d48171a0a26cfb6592a82204b071bbae88d4eac45257e459694a |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:9a89feea3c3bf1fdbcf146ba62db6bc10ab9ee7bb6611479d85255e19ff995d1 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:be3528ef0596f3f829d304800813a40702ae235fb89b426e9736a50b9391fed4 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:4e53a4bc05b02055bf53d9b199b149779e8374c140c772df7495e611d400f8a5 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:26bb4b739867036ae3123fdae5663c9a1fcf060e30da24fe69047264a1a8fc5a |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:c71e6f7961b5f116c1a9ab4546691efff8c35803e3b64ad336c916e77f205362 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:e69ff5e97664553afd5f6ad1327ebe859cc05ad7f81df666dddd42ebf1310c17 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:b7053786c9664535f0209285973b303e91e51fdb26ab2fb4fab839a92505624d |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:a2b8989ec5c56a508187c746885cb34c6c3f8c6fa6558bac90fbdc64fdc3cb5d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:c02b50ca5fb426d6bc17934ef51d00961aafb83bfb0aac2ad9890ab1027ca907 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:dee24ec9f35cba7b9d84c540bc81327bee5e7b10fe12349524145ed562cef891 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:d658ff27366c862e0acfb0d014b6dc11e5f2953b7ff98bf700efe9a73ec95ba0 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:ec9553e5f6cd64a95d60e9f933705006d81425d7b732a178c5b2d8cce6f08ab0 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:9cfe8a1724700c03a632d2b2faf7e62c9170139fa6547286ba2a31bea44f9a81 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:fcbc210d9357b561c5027047f64209e5cf91d7f705a90475cece8f41f7d4c280 |