Sign inSign up
CDI Controller

dhi.io/cdi-controller

CDI Controller 1.x (fips, dev)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips-dev, 1-debian13-fips-dev, 1-fips-dev, 1.66-debian-fips-dev, 1.66-debian13-fips-dev, 1.66-fips-dev, 1.66.1-debian-fips-dev, 1.66.1-debian13-fips-dev, 1.66.1-fips-dev

Index digest:

sha256:690b1c37af85242a4f98df1de86c55c0627782ba7982c2c1c01c7d3de4fe7df2

Manifest digest:

sha256:fa8bda649fc739403ceefadbd5df825488e0b1209009ab976aab3c6873cf3e22

Size

54.57 MB

Last pushed

1 hour ago

Vulnerabilities

0
1
2
1
0

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cdi-controller:1-debian-fips-dev

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cdi-controller:1-debian-fips-dev --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cdi-controller@sha256:b6f84c127b806ed0906786115768c5e7a05cfe7a12d01a8904abca203b3a71d3
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cdi-controller@sha256:a6aa56a768de92d79018baa2c64c3f2ab02dc9bdbcec5376b9dc528cd1a2fc64
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cdi-controller@sha256:35f2d6ea76b740a9de0e1eb066cee9ceb037062d34c5cd9ac8d1037cb772040e
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cdi-controller@sha256:34639c256eeaec4b4869ba280544a04f97024bcfe7412eb74ea4f213e72a91bc
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cdi-controller@sha256:0f79ce139f0bdf7a46c87534d4c8a2af3c91dc671e4065458cabb0cd2cc72536
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cdi-controller@sha256:c16e2fd862dd1792b396c09b4fb77386e34ea00fd66f26438a0f221f31d0033f
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cdi-controller@sha256:1171997002d8139e7ad1f015c92bf8b03eb3a4eb470e3ec8149ce8096c95d7c7
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cdi-controller@sha256:37089c56d447ef5dd36abed6d8267f6ba2e2229da0208be4d925149b461a3b51
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cdi-controller@sha256:6bc60f085d1551a9c5ff378a7a3a918512c607804dc491564dbc37ea1644df79
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cdi-controller@sha256:ddee4beb362622750fde0cb89771733d8c77e9ce137690147c77ba0eaad7af3a
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cdi-controller@sha256:1652ecee075f143e2add3538b5afdb1ff633402b8b23100552533927deba2c35
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cdi-controller@sha256:3390415fe9eb016f3a24f224cec1fcb313aa1646f7ae85116bc98e352bf183ed
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cdi-controller@sha256:bd76fd95e2620f9d5067cfb769bbc027305a17e0f72354cf52988547816d9b13
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cdi-controller@sha256:7898f68a25c8a95daac8a8282dc0911e2d59042b1ae0aba2ed53587c47bc98d8
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cdi-controller@sha256:2210a58230ce221e7258c20ff0934ad65808e2f3dee12d57f2e2b49dcf738e26
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cdi-controller@sha256:477512a4cee556f6bfaf4827b7264b8c669949f9a7b3777a800fe8925df5b0e0
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cdi-controller@sha256:7c7152237c9a7d791ebe4994c804d4af20068446eab45f8f2d47b999d8e259b2