dhi.io/calico-webhooks
3-debian-fips-dev, 3-debian13-fips-dev, 3-fips-dev, 3.32-debian-fips-dev, 3.32-debian13-fips-dev, 3.32-fips-dev, 3.32.3-debian-fips-dev, 3.32.3-debian13-fips-dev, 3.32.3-fips-dev
sha256:ff4f4f8435716c1b672fef63b82947e29ab31c133300f685e6c200f0ee13366d
Manifest digest:sha256:6dc3308ec6d576d97d3d3ba56056ffd1cf55499b65349c2d3dd7fb26f569d2d7
Size
53.39 MB
Last pushed
6 hours ago
Vulnerabilities
Support
Active
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
1. List all available attestations
docker scout attest list dhi.io/calico-webhooks:3-debian-fips-dev2. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/calico-webhooks:3-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verifyAll attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/calico-webhooks@sha256:4675fea2568f7c3a507345c3c3156d878bd21c9ab499a0fd47feaf015dfce6ab |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/calico-webhooks@sha256:21f6ff45b517f5e749d830a5a0251551b8ffe22937c2312c056dc4aa7228da9c |
| FIPS compliance v0.1 | https://docker.com/dhi/fips/v0.1 | dhi.io/calico-webhooks@sha256:71bdf6b8c21aa25d0483fa3cbf68c6eb136a9c66ab2c5688b2239b5636afb40d |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/calico-webhooks@sha256:79ef3645b42c7a0559add32b261dea112c6bba82046a95c90bd968bb7b79e71c |
| STIG scan v0.1 | https://docker.com/dhi/stig/v0.1 | dhi.io/calico-webhooks@sha256:03e50ac9ee083e389e05142e1a5ae4c8f168930cc31dcbe84c1d5d25882f1950 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/calico-webhooks@sha256:e26c5bfecdc21798f000c69c5da9a5bf5ea14b81bfc9abd4041d527e68d794d6 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/calico-webhooks@sha256:64064cf121fa96817491e3af4f9b05ade8fa57e1399822edaaf3cf063d17a044 |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/calico-webhooks@sha256:086d032f4da6b738f33dedb546882ee4bd2e0297787829eab24da1b718bd0817 |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/calico-webhooks@sha256:f72ce9cec67ce45a8efe5766344b6674567f8a60c480e1951154aacb1420af16 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/calico-webhooks@sha256:ec946a3c9ce9306ee27911188fd548ebc5364572ac354f08d06e8e3dd892d58c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/calico-webhooks@sha256:e5e467b6a7c03cac93f627aacdd3e44e614a1af346046796336d3e5db8753c0d |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/calico-webhooks@sha256:a475b0e351c078632187973fb1a1d5d15ac754ee70bc7f5c467f21d05d44292f |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/calico-webhooks@sha256:58f16520ba0a2b328d859a6c3a5032ccd89d9bf9f63dbb8c8bdd1f6d0b27a011 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/calico-webhooks@sha256:c042c50e1b6917521d4e75853ce663ec057c3610f03ebfb81ad463d5dae23fdc |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/calico-webhooks@sha256:c65de45b156cac94181a67966291870d3bcbb91d4b6ff222a7e8548c1c2c1a14 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/calico-webhooks@sha256:7c89ba821124a755743ecbdb821349226983acd0d999e85fc6936dfdf0e4905e |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/calico-webhooks@sha256:2a017c6edc99004dc5ba15267959395928c2ff6d99730cbfa3df3953594df2d5 |