dhi.io/calico-webhooks
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.32-debian-fips-dev, 3.32-debian13-fips-dev, 3.32-fips-dev, 3.32.4-debian-fips-dev, 3.32.4-debian13-fips-dev, 3.32.4-fips-dev
sha256:2c0624e034411734be47c509f7c9be7c4547ed989a97e653610e7a3a55e1bf72
Manifest digest:sha256:6d63e597f43cdd99652cf427bf43fb79afc9e90fe747fe57f344c6845cbe0092
Size
54.57 MB
Last pushed
2 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/calico-webhooks:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/calico-webhooks:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/calico-webhooks@sha256:75075b72831b223dec7e8e8ee5e565b4f456615b5e833abf3e07c57319dea8d5 |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/calico-webhooks@sha256:aaa8f96f8d093bbaa5403d674fe42c7b2a182be2bdf587007aa88228ce900eb4 |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/calico-webhooks@sha256:7638de13d85a3e4b4898b303386bbdc0d3e5ad6567f15c7b8adb8bc15bbab526 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/calico-webhooks@sha256:7711fc569c3a811d2a94b97d3582502c28e0d6b5b88897acb80fb990859bdab3 |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/calico-webhooks@sha256:64063911fa4f72c786c908092ab0f0a040ed7f3dae3a2756dc1c4d0faddfa9bc |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/calico-webhooks@sha256:b490bafe7db280cea0139290ae015526d63a9eeed87336bf299114bd06fa32e9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/calico-webhooks@sha256:4814826cc8ff828c54e2019cefc8684eac71f770af0d594319c12ba8785cd73e |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/calico-webhooks@sha256:e60ba6f9bf31fd26efd4047bc4f9b1d88a02c25e69caff6719409172dc03bce6 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/calico-webhooks@sha256:7739482be19ff5f4482a7e33729eb91c5c911ee78e224dbdfee298c284595b0f |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/calico-webhooks@sha256:a6bb815d8063126c5d869735b1b049b44b20b279588e91345414ae3e35fd2861 |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/calico-webhooks@sha256:812a80e47975cbbf44c492d98b90c1212dc4eb3d62a82c728677e298c76d4b72 |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/calico-webhooks@sha256:145a726dedc6e2f4f6a1bde7ce02b4534a0b270f1f781021c54ac46883c192d7 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/calico-webhooks@sha256:00736bdf2154011d41af2db849cad8a832f2de20b400aca9a681ee2e5b399bfe |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/calico-webhooks@sha256:48bd47e3ffa9603011d98a36ac84d4aa3c85f00f8cb53b123fa0c1a52cb4ff5b |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/calico-webhooks@sha256:3fb2a2c9b6bb701d0d98431eecdffb3725c97e215b4e035fdd9bddbd52e8bf2e |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/calico-webhooks@sha256:0a32fd04a7542b51463362a4459a24aa9e756dd44924468930d5381457add8d9 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/calico-webhooks@sha256:b2fc2576de0a36785a546e10bd6173cee8808f7e626811425dbb331b44fc06fd |