dhi.io/argo-rollouts
1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.10-debian-fips-dev, 1.10-debian13-fips-dev, 1.10-fips-dev, 1.10.2-debian-fips-dev, 1.10.2-debian13-fips-dev, 1.10.2-fips-dev
sha256:f54cbd13a86bbcf1c49c866e9115c983b70e218ff7959a75c79b0a2b334aebff
Manifest digest:sha256:e851da6d5213e2c0f2c67658d2f2fd4e496996c632b185ffe8f8ece3557f1702
Size
69.80 MB
Last pushed
4 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/argo-rollouts:1-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/argo-rollouts:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/argo-rollouts@sha256:ab2b8b3b8f608191e9d499ea1a1f564198481518597e0bdf3d9ce9e5a70a8196 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/argo-rollouts@sha256:363e0a64ca445ecbbe60c48dd713d77ae2b57429e3ffbed63d502f7b56e33cc2 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/argo-rollouts@sha256:73e1b5604f4832499da77437aa01ebfe33aa0d5a527ef2135b3775a35c215a8c |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/argo-rollouts@sha256:437cd64c070d6ef461cf0f7a0e2cd98d028ce5737fe28b0fb985237a054e5161 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/argo-rollouts@sha256:1718521801eac1f95bb0fd7dc14e2f10ad3ad7c440e8e8dda2879549169eae5c |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/argo-rollouts@sha256:64dd885644c00d3d8254effd3a548c05bea1eea53441baf518e66dec1f8ea416 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/argo-rollouts@sha256:0539fb163f6d4a4b997e367345167826685806a41dde4f5b501ab37de2282aa7 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/argo-rollouts@sha256:4b603c89183f889586623abe8540eadce585d807cb620b6f28cb6f3fc796b9aa |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/argo-rollouts@sha256:0c907af5b34e38268ea9b775a09bfb4296e16cce21f47e2bd9e53726bdf5787f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/argo-rollouts@sha256:4d30128cdc86b8d3a1b16df62eff70d163b08bb2533275b36c8339fb18b47cdc |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/argo-rollouts@sha256:23772045f1d3212620f03c9107fb59321c1c8f6c83ae590f74a288da06ed691c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/argo-rollouts@sha256:c9a249df560fcc8e0ce2244e04c576c65e7fbf6b92ebef70e0bc53e2b4a59c17 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/argo-rollouts@sha256:8b3db77c85fc53c46651b30f2107b2f8d8fc933b2c622cbf2d116ae179442afd |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/argo-rollouts@sha256:bc9df4a1554642ab8ed33a2c6654af8bd3719b30960a7e0408f99bdb27e5c0fc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/argo-rollouts@sha256:bf9423c76658b73a85cd36c732f7acc456d1d3423532c473150bbcb2c7a86abf |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/argo-rollouts@sha256:e20bf61bc2d0e5733a13d467b7733688a04e04dc2176245b223b2e19856736fa |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/argo-rollouts@sha256:be147adbea9c5fdef9d4506abb0b6caf7e08142d39dc38cafa09ca9caab2ce73 |