Sign inSign up
Azure Key Vault Controller

dhi.io/azure-keyvault-controller

Azure Key Vault Controller 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.8-debian-fips, 1.8-debian13-fips, 1.8-fips, 1.8.4-debian-fips, 1.8.4-debian13-fips, 1.8.4-fips

Index digest:

sha256:23ed003886d9d2bee0ab47d986c32ee7fa72b0c79d5680e767372961216d4de5

Manifest digest:

sha256:aed6224e2cf804721f517c1d8ea8eef8243429ec35264a3751afbb8b128b4fdb

Size

21.37 MB

Last pushed

14 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/azure-keyvault-controller:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/azure-keyvault-controller:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/azure-keyvault-controller@sha256:e6db36310534a336085147802491e3a81ffea8d45378a6e1b055d90a9de7cf45
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/azure-keyvault-controller@sha256:8e126d1a152ccdc8de54c477f68482be7aa446e264036665fa67406a33a80f44
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/azure-keyvault-controller@sha256:7c3602d8eefc60330fa94c8cb8951db891aaa0b9ddef408dcd64874911e57677
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/azure-keyvault-controller@sha256:8ee3acb368c6e427db587179de89203abad0a638cd52654a5857d75c888ebd5d
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/azure-keyvault-controller@sha256:74ad742d9c14f6578029d2b70ebc08e3221f2593a765aa7b68e676813c757907
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/azure-keyvault-controller@sha256:1d82415d6323a94964b8f6fed42bb7027658db28bed65af107c250dc55ca5857
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/azure-keyvault-controller@sha256:315a872574d78d9adb95341af38bca6c540067801334328e99645c6f0d883031
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/azure-keyvault-controller@sha256:ec1c0320335050609195ca259d7caf9f4aa96276ed48a863705b772139f2f602
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/azure-keyvault-controller@sha256:59b54f77739101c233f4a4bb4d336710f79bb5a1539d4961cab2f8791d81d663
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/azure-keyvault-controller@sha256:7babc09bb5d2b674da9b3134988385e283fd3f1e12c5627bd109b6b62159fe96
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/azure-keyvault-controller@sha256:97d6f2398dac464ec47367c4a3f5771a66bf7118b247ee6dba882e64620322e5
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/azure-keyvault-controller@sha256:8a2e0bda929f0d3c8671e1b8733a94d68be761e5b4b86e1c7587d15cf1b92fa5
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/azure-keyvault-controller@sha256:9d1e21c94c81b1bad6f9db54b1faa7505ce0c5370b090ca00963e3726b1fd986
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/azure-keyvault-controller@sha256:15449196705ddd2665057bb2167e36214c54dc5eb075715cd0fd772d00cb690a
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/azure-keyvault-controller@sha256:1866bb74f97ca4b9456d39993af8b5763e905c5cc1523535b2b74cea79859d9a
SPDX SBOMhttps://spdx.dev/Documentdhi.io/azure-keyvault-controller@sha256:c573e6a72bbc2c9b307b838d894b234e27cff79b0b26132c0282ed5fec55a533