Sign inSign up
CDI Upload Proxy

dhi.io/cdi-uploadproxy

CDI Upload Proxy 1.x (fips)

CIS
FIPS
STIG
linux/amd64
debian 13
Tags:

1-debian-fips, 1-debian13-fips, 1-fips, 1.66-debian-fips, 1.66-debian13-fips, 1.66-fips, 1.66.1-debian-fips, 1.66.1-debian13-fips, 1.66.1-fips

Index digest:

sha256:5c9785f07e62f88c952b34b5d081c6ea1c59f1b05cd138cdc42a87a62070a085

Manifest digest:

sha256:d5dc3c333332a00ba954705a60dd956daf8495bc7f385ccae3a70c1f10b6dcb3

Size

21.07 MB

Last pushed

3 hours ago

Vulnerabilities

0
0
0
0
5

Support

Active

Overview

Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.⁠

Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub⁠ and also archived at https://github.com/docker-hardened-images/keyring⁠.

How to verify attestations

1. List all available attestations

docker scout attest list dhi.io/cdi-uploadproxy:1-debian-fips

2. Verify a specific attestation

For example, to verify the SLSA provenance attestation:

docker scout attest get dhi.io/cdi-uploadproxy:1-debian-fips --predicate-type https://slsa.dev/provenance/v0.2 --verify

Attestations

All attestations are signed and can be verified with cosign.⁠

PredicatePredicate typeReference
CycloneDX SBOM v1.6https://cyclonedx.org/bom/v1.6dhi.io/cdi-uploadproxy@sha256:d4e2579fa88d94e0af32a0a6c0142ac69047c73ab7adafdf503b8afe88836783
Changelog v0.1https://docker.com/dhi/changelog/v0.1dhi.io/cdi-uploadproxy@sha256:f9269117eff8ec73a6373672123f99078d19bca518e148cfd0ad2493ffd660fe
FIPS compliance v0.1https://docker.com/dhi/fips/v0.1dhi.io/cdi-uploadproxy@sha256:80e66474b09bfee3c856ff67be984b9b33d9c3862d80f9cbd5cca9b297699ee6
DHI Image Sources v0.1https://docker.com/dhi/source/v0.1dhi.io/cdi-uploadproxy@sha256:35bd93c5a052365d24bb5bf03842d3f6023fefc04523e031f0791451ca02a78c
STIG scan v0.1https://docker.com/dhi/stig/v0.1dhi.io/cdi-uploadproxy@sha256:f717f9009d6deac37b08d0b59b87db1b954aa4f27ab30db3cf993c2ff81b70bc
CVEs v0.2https://in-toto.io/attestation/vulns/v0.2dhi.io/cdi-uploadproxy@sha256:7f2858514012494c7f0837bc29e6cd3c93065c36fc4f486050646f426c7a88fe
VEX v0.2.0https://openvex.dev/ns/v0.2.0dhi.io/cdi-uploadproxy@sha256:afeb66588529f96f3f9a7b8930a0a97125e5f7b22287a059817f989db14edcec
Scout provenance v0.1https://scout.docker.com/provenance/v0.1dhi.io/cdi-uploadproxy@sha256:79b7148a8db5290fb092e2eb616200dbc2a048671e9df1faf551985d7273e801
Scout SBOM v0.1https://scout.docker.com/sbom/v0.1dhi.io/cdi-uploadproxy@sha256:6b5f9aedb683db552047634da0074e88e112786730cfdbeace069fa1bcc745d0
Secrets scan v0.1https://scout.docker.com/secrets/v0.1dhi.io/cdi-uploadproxy@sha256:8e3c643ca96a17d0bf5bed4dba180f0ae25e9d3ced612fe2e12c9ad89149bd75
Tests v0.1https://scout.docker.com/tests/v0.1dhi.io/cdi-uploadproxy@sha256:396a8f8698e0658f458377c9187aacc12d4d9e65c80b128711bcb0a986b5c7c3
Virus scan v0.1https://scout.docker.com/virus/v0.1dhi.io/cdi-uploadproxy@sha256:361e4183b459b5f8902833a60f67630d3c17fddfb972273286442e74ebbaca1c
CVEs v0.1https://scout.docker.com/vulnerabilities/v0.1dhi.io/cdi-uploadproxy@sha256:cf4ec6c447a0eb8ead034559392e880c985fcdc35a0c941de4d59f47e4ef3f3f
SLSA provenance v0.2https://slsa.dev/provenance/v0.2dhi.io/cdi-uploadproxy@sha256:0f4a1827bf25cd63d0fceabd1bd32e68811e3d7e8d6abe5c2610c720dcc93f45
SLSA provenance v1https://slsa.dev/provenance/v1dhi.io/cdi-uploadproxy@sha256:1bbe91a3419667b11d4504edfad8d069fda1c0f7f3d2423b7cdcaceab7bd47c8
SLSA verification summary v1https://slsa.dev/verification_summary/v1dhi.io/cdi-uploadproxy@sha256:a5b33c3d5244bda5c5bda3aa765d1044cdf711293280a1bf38a37e9edd62e4a1
SPDX SBOMhttps://spdx.dev/Documentdhi.io/cdi-uploadproxy@sha256:86693ebf479821c73614af85b3d235f0d8b8a99d9ac3aea0ce5b7fbfc321db78